find jobs
job title, keywords or company
city, state or zip code
Cyber Security Analyst Job more...
Location:Aberdeen, MD
First posted:June 08, 2017 (last updated 1 week 3 days ago)

Cyber Security Analyst (Job Number:428204)



SAIC is building a team to provide Enterprise Information Technology (IT) Solutions Sustainment support and the associated management and administration for the delivery of a combination of hardware infrastructure and application infrastructure necessary to achieve a complete, centralized, and elastic environment for Building, Hosting, Integrating, and Managing Web enabled business applications and/or application services. This is accomplished by using innovative software and hardware tools utilized to enhance information technologies. By integrating different technologies to include both the re-write of legacy systems and the addition of features to existing systems to maximize cost savings, resource utilization and provide a solution to unique Army business application's hosting and management challenges. The Cyber Security team will review and perform testing on client’s information systems to determine compliance with requirements, as well as identify and qualify risk associated with the implementation of the client’s information system, resulting in a complete risk assessment document in the form of a Security Assessment Report (SAR).


Serve as an individual on the Cyber Security Team.

Develop Cyber Security documentation validating software quality, security, reliability and maintainability attributes. Identify gaps in Cyber Security/CND posture and assess risks.

Participate in development and review of DIACAP/RMF documentation, Networthiness Documentation, and ensure STIG compliance and validation.

Provide quality assurance specialist support including formulating, coordinating, directing, and executing all quality assurance policies, tools, and training programs; conducting internal controls reviews to ensure product assurance competency and the effectiveness of surveillance activities.

Develop strategies, goals, tasks, roles, responsibilities, and information needs for Cyber Security surveillance and oversight.

Review information systems for compliance with applicable DoDI 8500.01 and DoDI 8510.01

Provide IS security advice and guidance in accordance with applicable regulations, and directives and guidance to Government and DoD partners for the protection of data at all classification levels including SCI.

Evaluate and recommend approval, disapproval, or waiver(s) for IS processing national security data. Provide input or consideration in the promulgation of future security policy.

Support and/or conduct site visits and assessments to inspect and verify IS reports and plans at various locations, and provide a written report for review and approval.

Prepare reports and memoranda, to include, but not limited to: Memoranda for the Record (MFR), Memoranda of Agreement (MOA), Authorization To Proceed, and status and technical briefs for review and approval by government Cyber Security.

Update data on Government-provided databases with current information about IS status.

Prepare, review, and record notification and status messages to indicate A&A state of systems to system owner or programs.

Ensure IS security requirements, including applicable RMF directives and guidance, are addressed and applied; appropriate documentation prepared by the system owners or programs inclusive of the Security Assessment Package, Concept of Operations (CONOPS) Plan, System Security Plans, System Requirements Traceability Matrix, Risk Management Matrix, Test Results, interface control documents, requests for changes, test plans, and other related program security documentation.

Track completion of the Security Assessment Package and report status.

Provide preparation of the Security Assessment Report (SAR). The SAR contents include, but not limited to, the Summary of Assessment results and Authorization Recommendation.



Education Requirement:

Bachelor's degree preferably in a Technical Computer Field (Computer Science, Management Information Systems, Information Technology, Networking) and 8+ years of experience. Experience (4+ years) may be used in lieu of degree.

Required Qualifications:

Experience with XACTA, DIACAP, Risk Management Framework (RMF), NIST, eMASS, SCAP Scanning, IAVA’s methodologies, STIG’s and ACAS.

Minimum 5 years experience specifically related to data/network/information system assurance and system design, information security assessments, C&A, Plan of Action Milestones (PoAM) remediation, Information Assurance Vulnerability Alerts.

Experience performing Information Assurance functions in a Capability Maturity Model Integration (CMMI) Maturity Level 3 (or better).

In depth knowledge of Information Assurance auditing, continuous monitoring, and analysis.

Possesses strong analytical skills and good interpersonal and communications skills in dealing with multiple contractor and government organizations.

Required Certifications:

Currently possess DoD 8570 certification, Security +

Clearance Requirement:

Must currently possess TS/SCI and be able to obtain a TS/SCI with Polygraph

Preferred Qualifications:

NSA Information Assurance Guidelines

Certifications: CompTIA Security +, CISSP, CEH, GSEC, GCIH, CISA, GCED, SSCP, and/or CISA

Familiar with multiple operating systems including Linux and Windows

Virtualization experience with technologies such as KVM and VMWare VSphere

SAIC Overview:SAIC is a premier technology integrator providing full life cycle services and solutions in the technical, engineering, intelligence, and enterprise information technology markets. SAIC provides systems engineering and integration offerings for large, complex projects. Headquartered in McLean, Virginia, SAIC has approximately 15,000 employees and annual revenues of about $4.3 billion.

EOE AA M/F/Vet/Disability

Job Posting: Jun 8, 2017, 12:45:25 PM
Primary Location: United States-MD-ABERDEEN
Clearance Level Must Currently Possess: Top Secret/SCI
Clearance Level Must Be Able to Obtain: Top Secret/SCI with Polygraph
Potential for Teleworking: No
Travel: Yes, 10% of the time
Shift: Day Job
Schedule: Full-time

Send this job to yourself or a friend.

Please mention
if asked how you found this job.