Today
Secret
Early Career (2+ yrs experience)
$70,000
No Traveling
IT - Security
Fort Novosel, AL (On-Site/Office)•Fort Rucker, AL (On-Site/Office)
Information Security Analyst
Fort Novosel, AL
Specific duties include, but are not limited to the following:
Responsible for maintaining the security posture of our program by conducting compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS)
Requires a deep understanding of cybersecurity principles, risk management, and familiarity with various compliance frameworks
Implement and manage the ACAS suite to conduct regular vulnerability scans across the programs' network infrastructure
Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders
Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets
Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner
Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST)
Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes
Collaborate with the compliance team to prepare for internal and external audits
Provide technical guidance on security best practices and assist in security awareness training initiatives
Stay current with emerging security threats, vulnerabilities, and controls
Manage the Plan of Action and Milestones
Prepare, review and update RMF documentation
Candidates must be US citizens able to obtain and/or maintain a Department of Defense Secret security clearance as a condition of employment
Certifications (IAT Level II)
Security+ CE (must obtain CySA+ within 90 days of employment)
At least 2-4 years of experience in cybersecurity or equivalent field
Knowledge with of the NAVINTEL ICD 503 Risk Management Framework (RMF) Implementation Policies/Directives and Dept. of Navy (DON) cybersecurity Policies/Directives.
Knowledge and experience with automated tools such as Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmark, and Security Content Automation Protocol (SCAP), and Retina.
Knowledge and experience of cybersecurity, A&A and RMF documentation development and support
Fort Novosel, AL
Specific duties include, but are not limited to the following:
Responsible for maintaining the security posture of our program by conducting compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS)
Requires a deep understanding of cybersecurity principles, risk management, and familiarity with various compliance frameworks
Implement and manage the ACAS suite to conduct regular vulnerability scans across the programs' network infrastructure
Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders
Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets
Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner
Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST)
Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes
Collaborate with the compliance team to prepare for internal and external audits
Provide technical guidance on security best practices and assist in security awareness training initiatives
Stay current with emerging security threats, vulnerabilities, and controls
Manage the Plan of Action and Milestones
Prepare, review and update RMF documentation
Candidates must be US citizens able to obtain and/or maintain a Department of Defense Secret security clearance as a condition of employment
Certifications (IAT Level II)
Security+ CE (must obtain CySA+ within 90 days of employment)
At least 2-4 years of experience in cybersecurity or equivalent field
Knowledge with of the NAVINTEL ICD 503 Risk Management Framework (RMF) Implementation Policies/Directives and Dept. of Navy (DON) cybersecurity Policies/Directives.
Knowledge and experience with automated tools such as Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmark, and Security Content Automation Protocol (SCAP), and Retina.
Knowledge and experience of cybersecurity, A&A and RMF documentation development and support
group id: apexsan
