Job Openings >> Senior Information Security Analyst - NDD
Senior Information Security Analyst - NDD
Summary
Title:Senior Information Security Analyst - NDD
ID:00128-MD
Location:Lexington Park, MD
Description

Perrygo is a small, growing company; we are passionate about our employees as well as supporting our customers. We are excited for the opportunity to bring aboard highly motivated and energetic individuals to join our team based out of NAS Patuxent River. Currently, we are seeking Senior Information Security Analysts to support the NAVAIR Digital Department in their efforts to accelerate digital and analytic technologies and capabilities across the NAVAIR enterprise.

Responsibilities may include the following:

  • Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
  • Review the following DIACAP/Risk Management Framework (RMF) documentation prior to the appropriate Digital Group technical authority approval including Assess and Authorize (A&A) Plans, Implementation Plans, Test Plans, System Plans of Actions and Milestones (POA&M), Validation Reports and DIACAP Scorecards.
  • Assist NAVAIR with achieving and maintaining a 90% FISMA score under the cognizance of the appropriate Digital Group technical authority for Information Assurance.
  • Retrieve data, create reports and maintain all IT systems registered under NAVAIR in DITPR-DON.
  • Review IT procurement requests on behalf of the Developmental Designated Approval Authority (DDAA) to ensure they are in compliance with current Federal, DOD, DON statutory and regulatory requirements. The Contractor shall identify potential issues and make recommendations to the Government for consideration.
  • Schedule and maintain all pre-collaboration meetings for each system/application according to the latest POA&M.
  • Generate weekly Platform Information Technology (PIT) and monthly RDTE metrics.
  • Perform firewall/port scans, device discovery scan, vulnerability assessment, and other requirements as required to ensure secure interoperability with DOD Contracts.
  • Identify, report and resolve any equipment that fails during audits prior to connecting the system to the networks.
  • Assist in the resolution of any cybersecurity event as needed
  • Assist in preparing draft documentation related to cybersecurity.
  • Provide information and makes recommendations as to the best way to secure IT computer assets, Local Area Networks and Wide Area Network, Cloud resources from the multitude of security threats.
  • Provide Echelon II Information Assurance Vulnerability Management (IAVM) support: Perform all required Echelon II IAVM functions in support of the Echelon II IAVM Lead. Conduct quality assurance reviews of VRAM for site and system compliance with cyber directives and orders. Ensure standardization of site and system records in VRAM and report back to the Enterprise ISSM. Provide SME guidance to VRAM stakeholders in the form of customer support, mitigation support, attend Rapid Response meetings, as required, adjudicate as necessary and provide technical and administrative analysis of action items in cyber directives and orders. Support monitoring and tracking of active orders ensuring site and system level compliance and reporting.
  • Provide Accreditation Sustainment support: Monitor and track overall execution of system-level POAMs. Review and track the activities of the continuous monitoring lifecycle, in support of the RMF process, for Platform IT (PIT), Program of Record (POR), RDT&E, and circuit cybersecurity requirements. Track vulnerabilities identified in ATO letters as conditions to ensure they are mitigated within the approved timeline. Track conditions initiated by an Extension Request.
  • Provide Echelon II Package Submitting Officer (PSO) / Approving Official (AO) support: Perform all required Echelon II PSO and/or AO CSA RMF process steps. Conduct quality assurance reviews for required content in all A&A packages (DIACAP, RMF, Platform IT (PIT), Program of Record (POR), RDT&E and circuits). Responsible for prioritizing and ensuring standardization, providing SME guidance to RMF stakeholders in the form of Customer Support, risk analysis and risk mitigation support, attend checkpoints meetings, as required, adjudicate as necessary and provide technical analysis of RMF artifacts to recommend an authorization decision to the respective AO. Support monitoring and tracking execution of POA&Ms for A&A packages.

Required Experience:

  • 10+ years of relevant experience with regards to the above-mentioned responsibilities

Required Education & Qualifications:

  • BS/BA and 3+ years of relevant experience is required
  • Security+ certification is required
  • Navy Fully Qualified Validator Level II
  • CISSP or Global Security Leadership Certificate (GSLC) or CISSM
  • Active Security Clearance – minimum of at least a current DoD Interim Secret security clearance is required
  • US Citizenship is required
  • Ability to work effectively in a fast-paced, team environment
  • Ability to be self-directed and contribute to engagements

Perrygo Consulting Group, LLC is an Equal Opportunity Employer, for all individuals, including protected veterans and those with disabilities. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, disability or veteran status.

Perrygo Consulting Group, LLC participates in E-Verify.

If being a part of a small, growing company while having the opportunity to work on exciting projects with challenging tasks excites you – then please apply today!

Compensation Package - We offer an excellent compensation package with competitive salaries and benefits, including:

  • Paid Time Off (PTO)/Paid Sick Leave
  • Paid Holidays
  • Flexible Work Schedules (offering a healthy work-life balance whenever possible)
  • Employee Assistance Program (EAP)
  • Fitness facility access
  • Supplemental Life and Accident Options
  • Medical, Dental, and Vision
  • LTD/STD, AD&D, and Life
  • Health Savings Account (HSA) with employer contribution
  • 401K Plan with employer match
  • Profit Sharing plan
This opening is closed and is no longer accepting applications
ApplicantStack powered by Swipeclock