Cyber Security Technology Management Analyst

This is a fully remote position, open to applicants in Alabama.

📋 Description

• Conduct audits on intricate information systems, applications, and enclaves.

• Verify that adequate controls are in place and accurately implemented.

• Ensure adherence to Federal, DOD, and DLA standards in procedures.

• Oversee Energy Applications for Industrial Control Systems (ICS), which include SCADA, DCS, and EMCS.

• Evaluate compliance with Information Assurance (IA) policy and suggest enhancements.

• Supervise IA for Energy Applications to ensure compliance with Federal, DOD, and DLA policies.

• Monitor certification and accreditation efforts.

• Prepare and revise documentation that supports FISMA and DOD RMF reporting requirements.

• Create RMF security documentation for OT applications.

• Conduct technical assessments of documented security certification outcomes.

• Evaluate the thoroughness of certification results.

• Identify system vulnerabilities and weaknesses.

• Recommend procedures, software configuration parameters, system modifications, or combinations to reduce risks and facilitate accreditations.

• Analyze vulnerability scans, SRR results, and STIG compliance issues from both internal and external IA reviews.

• Track deficiencies and vulnerabilities through the implementation of mitigation strategies.

⛳️ Requirements

• Minimum of three years of experience in the design, maintenance, and operation of highly complex and secure communications network environments.

• Multi-disciplinary experience with Firewall/Intrusion Prevention Systems (IPS), antivirus solutions, host-based protection, security incident event management, virtual shared computing environments, and network/security management.

• Strong understanding of communication protocols, network technologies, and the ISO Open Systems Interconnection telecommunications model.

• Familiarity with Defense Information and Accreditation Risk Management Framework (RMF) and the processes governing system and application controls.

• Knowledge of DOD/DLA security policies and compliance requirements.

• A total of five years of relevant experience.

• Capability to obtain a NACI, IT III sensitivity clearance.

• Experience with NIST Special Publications 800-53 rev. 5, 800-53 rev. 4, and 800-82.

• Relevant certification that meets DOD 8570.01 IAM level III, such as CISM, CISSP, or GSLC.

• Cybersecurity certification relevant to AIS/IT and ICS/SCADA.

• Ten years of hands-on experience in the industry, government, and/or consulting related to information technology management.

• IT project management experience utilizing various Microsoft tools.

• Knowledge and experience in managing information technology services and strategies.

• Proficiency in Microsoft Excel and Access.

• Proficiency in Microsoft Office applications, including Word, PowerPoint, and SharePoint.

• Familiarity with Enterprise Mission Assurance Support Service (eMASS).

🏝️ Benefits

• Health insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Disability insurance.

• 401(k) package.

• Generous Paid Time Off.

• Ongoing professional development opportunities.

• Confidentiality for all applicants.

• Equal opportunity employer; support for individuals with disabilities and veterans.