What are the responsibilities and job description for the Information Security Analyst position at Andworx?
Andworx is hiring an Information Security Analyst to join our team. As the Information Security Analyst, you will be responsible for developing and maintaining the programs that help our client meet their information security objectives. Additionally, you will assist in oversight of information security best practices for our Federal Government Customer, including JFHQ-DODIN CTOs, Orders and identified vulnerabilities.
We are looking for a proactive, motivated individual with experience supporting Federal Government clients, who possesses excellent communication and writing skills and loves working in a strong team atmosphere.
Minimum Qualifications
- This position requires a set schedule of 1-day per week on site with our customer in Arlington, VA. Please note that this requirement is subject to change at our customers direction.
- 8 or more years direct experience working in IT;
- 3 years must be as an Information Security Analyst within the Federal Government.
- Assist in determination of IA requirements, providing support of implementation and enforcement, and vulnerability remediation.
- Ability to engineer and deploy network defense countermeasures.
- Experience performing manual assessments in accordance with most recent DISA STIGs.
- Strong verbal and written communication skills.
- Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline.
- U.S. citizenship.
- Active DOD Secret clearance.
Required Certifications
- One DoD 857001.M compliant IAT Level II certification such as: CCNA Security, CySA **, GICSP, GSEC, Security CE, CND, SSCP etc.
- One DoD 857001.M operating system certification for IAT Level II.
Responsibilities
Your primary responsibility as the Information Security Analyst is to develop and maintain the programs that help our client meet their information security objectives.
- Review and assist with drafting Information Assurance (IA) policies and guidance.
- Maintain clients Enterprise Mission Assurance Support Service (eMASS) package for any IT program that requires an Authority to Operate (ATO):
- Review change request information, participate in Change Management meetings providing SME level recommendations based on DoD policy and security best practices.
- Monitor and responds to guidance, directives, and issuances from the USCYBERCOM; track and report on compliance with Communication Tasking Orders (CTOs), Task Order (TASKORD), Operational Orders (OPORD), Information Assurance Vulnerability Alerts (IAVAs) using the Continuous Monitoring and Risk Scoring (CMRS) System.
- Perform scans and analysis of client’s devices for compliance with federal, DoD, and USCYBERCOM requirements.
- Provide current vulnerability reports and historical trending to leadership.
- Track and monitor IA Workforce Improvement Program (IAWIP) compliance:
- Maintain and create SOPs as needed.
- Maintain, create, and submit IA accreditation documentation (RMF and ATC packages).
- Maintain RMF Authority to connect documentation and controls.
- Maintain a tracking log for all Electronic Spillage activity across client’s enterprise system.
- Participate in Information Assurance (IA) strategic planning activities, evaluating services provided to the Enterprise, including the assessment of security risks, preparing responses to security related data calls and supporting Certification and Accreditation activities, including tracking Plan of Action and Milestone tracking.
- Apply federal government security policies and patches.
- Maintain Agency public key infrastructure system.
- Implement security designs in hardware, software, data and procedures.
Andworx gets things done! We are a collaborative team of digital transformation experts and IT professionals who have an entrepreneurial mindset. We ignite the enthusiasm of our customers by delivering innovative, creative, and high-quality solutions, all paired with unparalleled services.
We are a team of life-long learners who enjoy excelling, coaching, and mentoring. Together we celebrate our achievements and learn from our challenges as we grow through each experience as a team.
Additional Information
Andworx is an Equal Opportunity Employer and provides equal employment opportunity to all individuals regardless of their race, color, creed, religion, gender, age, sexual orientation, national origin, disability, veteran status, or any other characteristic protected by state, federal, or local law. Employment decisions are based solely on qualifications, merit and business need.
Andworx participates in the E-Verify Employment Eligibility Verification Program.
