[Hiring] Cyber Security Technology Management Analyst @Connected Logistics

Role Description

The Cyber Security Technology Management Analyst will perform audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist and are correctly implemented; and that procedures comply with Federal, DOD, and DLA standards.

• Monitors Energy Applications for Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), and Energy Management Control System (EMCS).
• Assesses compliance with IA policy and recommends improvements as appropriate.
• Monitors Information Assurance (IA) for Energy Applications to ensure compliance with Federal, DOD, and DLA IA policy.
• Monitors certification and accreditation activities.
• Recommends preparation and updating of documentation to support Federal Information Security Management Act (FISMA) and DOD Risk Management Framework (RMF) reporting requirements.
• Ability to develop RMF security documentation on behalf of OT applications.
• Performs technical reviews of documented security certification results and assesses their comprehensiveness.
• Identifies system vulnerabilities and weaknesses.
• Recommends human procedures, software configuration parameters, system changes, or combinations of them to mitigate risks associated with detected vulnerabilities.
• Analyzes vulnerability scans, Security Readiness Review (SRR) results, and Security Technical Implementation Guide (STIG) compliance.
• Tracks deficiencies and vulnerabilities from identification through implementation of adequate mitigation measures.

Qualifications

• Demonstrated experience of at least three years with the design, maintenance, and operation of highly complex and high secure communications network environments.
• Multi-discipline experience with Firewall/Intrusion Prevention Systems (IPS), antivirus, host-based protection, security incident event management, virtual shared computing environments, and network/security management.
• Demonstrated understanding of communication protocols, network technologies, and the International Organization for Standardization (ISO) Open Systems Interconnection telecommunications model.
• Knowledge of Defense Information and Accreditation Risk Management Framework (RMF) and process for system and application controls.
• Knowledge of DOD/DLA security policies and compliance.

Requirements

• Five (5) years of relevant experience.
• Must be able to possess a NACI, IT III sensitivity.
• Experience with NIST Special Publications, 800-53 rev. 5, 800-53 rev. 4, and 800-82.
• Relevant certification meeting DOD 8570.01 IAM level III such as CISM, CISSP, or GSLC.
• Ten years of practical industry, government, and/or consulting experience in information technology management.
• IT project management experience using various Microsoft tools.
• Knowledge and experience in managing information technology services and strategies.
• Proficiency in basic analytical software such as Microsoft Excel and Access, and proficiency with the Microsoft Office suite, including Word, PowerPoint, and SharePoint.
• Experience with Enterprise Mission Assurance Support Service (eMASS).

Benefits

• Anticipated salary range: $110,000.00 to $120,000.00 USD.
• Robust benefits package including health, dental, vision, life, and disability insurance.
• Great 401(k) package.
• Generous Paid Time Off.
• Encouragement of ongoing professional development.