NCIS Cyber Security Analyst | Active TS/SCI clearance

Description

This is a Cyber Security Analyst role supporting the information technology division of the Naval Criminal Investigative Service in Quantico, VA.

The service has about 2,200 personnel, roughly 700 at headquarters and the rest at offices worldwide. It is the Department of Navy component responsible for criminal investigations, law enforcement, counterterrorism, counterintelligence and cyber matters.

The company is a global technology and professional services firm serving US government, defense and intelligence customers. It has about 26,000 staff in 50+ countries and works in AI, cloud, cyber and software development.

The position is pending funding.

Responsibilities

• Prepare the ACAS-related artifacts for authorization packages assigned to issues and NQVs, following the Navy testing guidance and the RMF process guide.
• Review Security Technical Implementation Guides, run scanning tools to measure STIG compliance, and confirm that security configurations meet DoW requirements and support the RMF A&A process.
• Run and record tests of RMF security controls, and document evidence that they are implemented and effective against NCIS policy.
• Use NIST SP 800-53 Revision 5 to select, tailor and document security and privacy controls that fit federal requirements and the package's operating needs.
• Run 90 Day Baseline Scans for each authorization package per Navy requirements, and produce Detailed Vulnerability List reports for eMASS and ACAS summary reports per the Navy testing guidance.
• Run weekly and as-needed ACAS scans for RMF STEP 3 and STEP 4 work, vulnerability assessments and asset queries for authorization package systems, and build asset lists from supplied hardware lists.
• Support continuous monitoring and report vulnerability status for all active enterprise security packages.
• Perform risk analyses of computer systems and applications in every system development life cycle phase using ACAS.
• Start eMASS registrations, prepare, process and update RMF A&A packages, keep them compliant, and validate that controls and vulnerabilities meet DON RMF authorization requirements.

Requirements

• Hands-on work in assessment and authorization, cybersecurity assessment, eMASS and RMF.
• CompTIA Security+ CE certification.
• At least 5 years of related experience in systems security, with a focus on Navy cybersecurity practice.
• Experience writing RMF A&A Security Plans, System Level Continuous Monitoring, Ports, Protocols and Services Management, Host Based Security Systems, ACAS vulnerability scanning and STIGs.
• Experience working with eMASS tools.
• Experience preparing, processing, assessing, validating and maintaining RMF A&A packages in eMASS and XACTA.
• Experience with public key-based technologies in applications.
• A BS degree, or 4 years of additional experience in place of a degree.
• An active Top Secret/SCI clearance is required. A Top Secret clearance with SCI eligibility is also accepted.
• US citizenship is required.
• What we'd love for you to have: completed Navy RMF training.
• What we'd love for you to have: formal ACAS training.
• What we'd love for you to have: formal eMASS training.

Conditions

Onsite at Quantico, VA, 40 scheduled hours per week, with no travel required.

The likely salary is $106,275 to $143,783. This is not a guarantee, and pay is set by experience, geographic location and possibly contract requirements, so it may fall outside this range.

Identity verification uses biometrics and AI. You must be on camera for virtual interviews, and your photo may be taken to verify identity. By proceeding, you authorize use of your biometric data for verification and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• A 401(k) where you can contribute pre-tax and post-tax dollars up to IRS limits, with a company match.
• Full flex work weeks where possible, and paid time off for vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning opportunities, and an internal mobility team to help with career goals.
• A military-friendly workplace.