Senior Cyber Security Analyst (Senior Information Security Analyst)

Company: Guidehouse
Location: Gambrills
Posted on: January 15, 2021

Job Description:

Job Description Overview Guidehouse is a leading management consulting firm serving the public and commercial markets. We guide our clients forward towards new futures that build trust in society and your professional skills along the journey. Join us at Guidehouse. Responsibilities Incumbent will support the Naval Air Systems Command (NAVAIR) in a once-in-a-generation digital transformation, driving change and devising how data can be integrated, controlled, distributed, and accessed by programs, business units and operators across the enterprise. Guidehouse is seeking cyber security analysts who can support a large Navy contract providing enterprise-wide IT transformation and acceleration to NAVAIR. The individual will support the NAVAIR Digital Cyber Division. The Cyber Division is responsible for setting the Policy and Guidance for the Naval Air Systems Command (NAVAIR). Responsibilities: Activities related to the secure transmission and storage of electronic information, drafting cybersecurity policy and procedures, user awareness training, and risk management. Further cybersecurity activities pertain to recommending and supporting the use of electronic security hardware and software tools and mechanisms including, but not limited to, encryption devices, access control, user identification and authentication, and malicious content detection. Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses. Responsibilities will include: a) Provide guidance and support to NAVAIR workforce in the following areas: NAVAIR Accreditation Database, Helpdesk Expert Automation Tool, DADMS, DITPR-DON, NAV-IDAS, Navy ERP, etc. b) Review the following DIACAP/Risk Management Framework(RMF) documentation prior to the appropriate Digital Group technical authority approval; Certification and Accreditation(C&A) Plan, Implementation Plan, Test Plan, System Plan of Actions and Milestones (POA&M), Validation Report and DIACAP Scorecard. c) Assist NAVAIR with achieving and maintaining a 90% FISMA score under the cognizance of the appropriate Digital Group technical authority for Information Assurance. d) Retrieve data, create reports and maintain all IT systems registered under NAVAIR in DITPR-DON. e) Review IT procurement requests on behalf of the Developmental Designated Approval Authority (DDAA) to ensure they are in compliance with current Federal, DOD, DON statutory and regulatory requirements. The Contractor shall identify potential issues and make recommendations to the Government for consideration. f) Update Naval Air Systems Command Accreditation Database (NAD) System Identification (SYSID) records. g) Schedule and maintain all pre-collaboration meetings for each system/application according to the latest POA&M. h) Generate weekly Platform Information Technology (PIT) and monthly RDTE metrics. i) Perform firewall/port scans, device discovery scan, vulnerability assessment, and other requirements as required to ensure secure interoperability with DOD Contracts. j) Identify, report and resolve any equipment that fails during audits prior to connecting the system to the networks. k) Assist in the resolution of any cybersecurity event as needed l) Assist in preparing draft documentation related to cybersecurity. Qualifications Required Experience: BS Degree in a computer science, computer programming, cybersecurity, or engineering discipline from an accredited college or university. In lieu of a BS Degree, a High School diploma or equivalent GED and 6 years work experience performing the stated or similar responsibilities or an Associate's Degree and 4 years work experience performing the stated or similar responsibilities. Certification Requirements Candidate must meet and maintain education, training, and certification requirements in compliance with applicable DoD/DoN Cybersecurity Workforce policy (currently DoD 8570.01-M/8140.01/SECNAV 5239.2). Security Clearance: Active Secret clearance Desired experience: CompTia Security + Continuing Education Navy Fully Qualified Validator Level 2 International Information Systems Security Certification Consortium (ISC2) Certified Information Systems Security Professional (CISSP) Global Information Assurance Certification (GIAC) Security Leadership Certification (GSEC) Information Systems Audit and Control Association (ISACA) Certified Information Security Manager (CISM) M.S. degree in Computer Science, Information Systems/Technology, Engineering, Business, or Mathematics 5+ years within the DoD IT Environment. Knowledge of various DoD IT Environments Knowledge of Navy Processes and Procedures Knowledge of the Naval Air Systems Command (NAVAIR) Additional Requirements * The successful candidate must not be subject to employment restrictions from a former employer (such

Keywords: Guidehouse, Baltimore , Senior Cyber Security Analyst (Senior Information Security Analyst), Professions , Gambrills, Maryland