Highlights
The Information Security Analyst shall work to support the cybersecurity posture by performing the DoW Risk Management Framework (RMF) process across Network and System assets. DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.].
Numbers & Facts
| Location | Portsmouth, VA |
| Industry | Telecommunications Services |
| Company Size | 100 to 499 employees |
| Year Founded | 2011 |
| Website | http://www.prosoft-eng.com |
Description
Position: Information Security Analyst
Location: Norfolk Naval Shipyard, on-site
Active Top Secret Clearance is required
The Information Security Analyst shall work to support the cybersecurity posture by performing the DoW Risk Management Framework (RMF) process across Network and System assets. They will be responsible to:
- Apply Cybersecurity / INFOSEC concepts and requirements.
- Perform System / Network vulnerability analysis.
- Perform Risk assessment and risk mitigation analysis.
- Support Security Test and Evaluation (ST&E).
- Participate in contingency planning, Firewall Policies, and Ports and Protocols checks.
- Maintain all day-to-day Vulnerability Remediation Asset Management (VRAM) activities.
- Enter the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.
Qualifications:
- Minimum of four (4) years of experience in CS analysis in support of Cyber metrics analysis, incident response and mitigation; risk mitigation analysis, developing contingency plans. KSAs include:
- Experience with Cyber applications, [e.g., ACAS, HBSS, MDE, MDI, Splunk]
- Expert and Mastery levels with institutional knowledge and a minimum of 4 years' experience, on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
- Expert knowledge of and experience with CS requirements as defined by Public Laws, National, DoD, and DON guidance [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
- Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information.
Education:
- Bachelor's degree in an IT related discipline OR Level II Certification (Security+ or higher) AND a minimum of four (4) years of experience.
Certifications:
- Active Security + CE or higher
About Company
We have an uncompromising commitment to providing our customers with quality technical products and services, while meeting high moral and ethical standards in the performance of our jobs. True Quality Assurance is the result of management commitment, dedication, and hard work throughout every level of our organization. Quality is an integral part of our operations and is evident in every aspect of our business, and PROSOFT enjoys an exceptional record of corporate performance.
The objective of PROSOFT's Quality Policy is to exceed the needs and expectations of our customers by providing highly skilled professionals. We attribute our success to our best-in-class personnel supported by a corporate culture that endorses the continual training, education, and empowerment of our employees in the delivery of quality technical products and services. Our active, company-wide Quality Management System provides an environment to establish, communicate, and review the quality objectives that enable us to continually cultivate success. PROSOFT and our employees commit to continuously improve the processes by which we provide our services and products, so that our work meets requirements, and is done right the first time.