Cybersecurity Analyst

Information Systems Solutions (ISS) is looking for a Cybersecurity Analyst to support the JS J7 Joint Training DevSecOps pipeline core infrastructure and data center in Suffolk, VA. The selected candidate will be responsible for supporting the Deputy Directorate, Joint Training (DDJT). Efforts include using the Enterprise Mission Assurance Support Service (eMASS) to record RMF activities such as implementation of all applicable security controls as identified via information system security categorization in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 and Committee on National Security Systems Instructions (CNSSI) 1253. The number of families and controls will vary depending on the security categorization, the application of overlays (privacy, classified, intel, etc.) and any security control tailoring (AI, NOFORN, etc.).

This role is 100% onsite.

Qualifications and Responsibilities:

• Adhere to the DoD cybersecurity policy requirements set forth in DoDI 8500.01, Cybersecurity, and DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT) and their successors.
• Provide personnel with knowledge in DoD security hardening, collection, and assessment tools, including Security Technical Implementation Guide (STIGs), Assured Compliance Assessment Solution (ACAS) scans, and other currently Government-approved tools.
• Experience with security architectures, firewalls, and network access with the ability to assess and author Plans of Milestones and Actions (POAMs) in accordance with current eMASS Accreditation.
• Possess and retain knowledge of the RMF Knowledge Service, the DoD's official site for enterprise RMF policy and implementation guidelines.
• Review any RMF activities on behalf of JS-J7 ensuring adherence to Cyber Task Orders (CTO), Executive Orders (EXORD), etc., to maintain compliance with government regulations (DISA, FISMA, etc.).

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Clearance Level

Secret clearance

Certifications (IAT Level II)

• Security CE
• GIAC GSEC
• CompTIA Cloud
• Certified Ethical Hacker (CEH)

In addition, the following functional area certifications prior to start date:

• DISA eMASS Computer Based Training (CBT)
• DISA ACAS Operator Training Course (CBT)

Required Skills

• Technical writing skills are preferred.
• Risk assessment, analysis, and remediation.
• Vulnerability assessment, analysis, and remediation.
• Communication and collaboration with several teams concurrently.
• Coding in React.JS is a plus.