What are the responsibilities and job description for the Cyber Security Analyst position at Apex Systems?
Title: Navy Validator (RMF Cyber Analyst)
Location: Norfolk, VA (Hybrid)
Employment Type: Contract to Hire
Employment Length: 6 Month (possible conversion based on performance)
Pay: $58-$68 /hr
Starting Salary at Perm Hire: $135,000 - $165,000 Benefits
Schedule: M-F on-site 5 days for now. With new presidential return to work orders, client is working out hybrid flexibility. More to come
Requirements:
- Active Secret Clearance
- NQV creds in good standing (need)
- IAT II or IAM III level certification in hand or within 3 months of starting
- 5 YOE assessing IT security controls, documentation, and supporting evidence
- Demonstrated oral and written communication skills across multiple levels of technical, administrative, and management personnel, including government and FLAG level customers
- Well versed with the role of a validator for multiple Risk Management Framework (RMF) accreditation types including baseline changes (Use Cases), ASR, ATO, CAR, DATO, Platform IT, HRR/HRE, Assess Only, and IATT
- Familiarity with assessment of Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
- In-depth knowledge of the NIST Special Publications with focus on 800-53 and 800-37
- Ability to read, interpret, and conduct traceability across architecture / topology diagrams, Ports Protocols and Services, hardware/software lists, and other artifacts
- Expert knowledge using eMASS
- Experience with DITPR DON/DADMS
- Familiarity with FAO business rules, policies, and procedures
- Hands-on experience conducting vulnerability assessment and analysis utilizing standard technologies such as SCAPs, ACAS/NESSUS scans, and DISA STIGs/SRGs
- Knowledge of IT security principles and methods, such as firewalls, demilitarized zones, encryption standards
- CISSP (preferred)
- Bachelor's degree in IT or related field
- T Certification(s) in accordance with DoDI 8140 requirements and NQV Qualification Standards
Job Description:
- Act as a trusted agent for the program tasked to perform independent assessments of IT systems and evaluate risks in alignment with risk appetite and compliance requirements
- Independently develops and executes Security Assessment Plans (SAP) in accordance with established Department of Navy’s Risk Assessment Guide
- Audit security controls and evaluate supporting evidence to determine compliance
- Analyze ACAS scan results and STIG checklists and evaluate compliance
- Perform control level risk assessments and provide Risk Recommendation
- Independently author Security Assessment Report Executive Summaries (SAR) in accordance with established Department of Navy’s Risk Assessment Guide
- Provide support to system owners and Information Systems Security Engineers (ISSE) in order to resolve cybersecurity and Assessment and Authorization (A&A) hurdles
- Consult on the program’s creation of technical mitigation statements to reduce risks of vulnerabilities
Salary : $135,000 - $165,000
