Info. Security Analyst Sr Principal

Description

The team supports US Battlefield Information Collection and Exploitation System eXtended (US BICES-X), a long-running program that is still growing. It supports intelligence sharing on current and emerging global threats for combatant commands, coalition partners and emerging nations.

The team is spread internationally and works directly with each combatant command. It builds and runs an enterprise network for BICES Global Enterprise Mission Support Services, with a focus on performance, security, scalability, stability, lower cost and simpler operations.

The role sits on a cross-functional team that works on real-world problems at a fast pace. The company is a global technology and professional services firm with about 26,000 employees in more than 50 countries, serving US government, defense and intelligence customers in AI, cloud, cyber and software development.

Responsibilities

• Run cybersecurity work for a large program, which was formerly called Information Assurance. Help draft, share, direct and audit program policy, standards and operating procedures with government program staff, USAF and other agencies.
• Use available resources to carry out cybersecurity tasks and brief senior company and government personnel on the program's overall security posture.
• Audit networks and systems for vulnerabilities with STIGs, DISA SCAP, the ACAS scanner and ESS Policy Auditor. Remediate findings across Linux, Windows, Cisco, Juniper, VMware and related operating systems.
• Create, track and review Plan of Action and Milestones (POA&Ms), and identify solutions that help resolve and remediate problems.
• Pass tactical and strategic threat information to government leaders, Cybersecurity Operations and A&A (formerly C&A) staff so they can make cyber risk decisions and reduce threats.
• Apply the DoW Risk Management Framework (RMF) under DoW 8510 to judge the security posture of information systems through control validation and security testing.
• Keep the security accreditation status current for multiple DoW classified networks and their interconnected systems, including system documentation.
• Work with AFRL, USAF and other organizations on audits and inspections. Prepare the documentation needed for SAVs, ST&Es and CCRI.
• Review firewall change requests and assess the risk to the organization.
• Advise on countermeasures for vulnerabilities and on fixing non-compliant controls.
• Protect networks, systems and applications by enforcing organizational security policy and monitoring vulnerability scanning devices.
• Carry out scheduled and ad hoc audits and vulnerability assessments, covering user accounts, application access and file systems, to check compliance.
• Lead and guide less-experienced technical staff.
• Keep up with relevant technology as assigned and take on special projects when needed.

Requirements

• Hold a current Top Secret/SCI clearance, or be able to obtain one.
• Be a US citizen.
• Have 10+ years of related experience, or a BA/BS degree that can replace additional years of experience.
• Have comprehensive knowledge of data security administration principles, methods and techniques.
• Meet DoW 8570.01M requirements for IAT Level II, for example through CASP CE.
• Understand DoW RMF, including NIST 800-53 Rev 4 and Rev 5.
• Understand DoW policies and procedures, including FIPS 199, FIPS 200, NIST 800-53 and other applicable policies.
• Bring expertise in information system security, system security and technical security.
• Preferred: 8+ years of experience.
• Preferred: Ability to set priorities across several projects or tasks at once and work in a dynamic, fast-paced, team-oriented environment.
• Preferred: Additional specific certifications, depending on the job assignment.

Conditions

Work onsite at MD Andrews AFB, Maryland, USA, 40 hours per week, with no travel required.

The work is normally done in an office and needs standard safety precautions. It may involve some physical effort, such as handling light materials, boxes or equipment.

The likely salary range is $142,792 to $161,000. This is not a guarantee. Pay depends on experience, geographic location and possibly contract requirements, and may fall outside this range.

Complete an identity verification process that uses biometrics and AI. You must be on camera during virtual interviews, and your photo and biometric data may be collected and used for verification and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• A 401(k) that accepts pre-tax and post-tax contributions up to IRS limits, with a company match.
• Full flex work weeks where possible, plus vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel accident insurance, provided or available.
• Total rewards are reviewed regularly to keep them competitive.