NQV Information Security Analyst

Position: Information Security Analyst (NQV)

Location: Norfolk Naval Shipyard 100% on-site

Clearance: Top Secret clearance

Job Description

The Information Security Analyst (NQV) shall work to support DoD Risk Management Framework (RMF) and validate Network and System assets. They will be responsible to:

• Follow Accreditation & Authorization (A&A) process and standards.
• Perform System / network vulnerability analysis.
• Conduct Risk assessment and risk mitigation analysis.
• Perform Security Test and Evaluation (ST&E) processing.
• Validate Security Technical Implementation Guide (STIG) Processing. Use automated STIG processing tools [e.g., Security Content Automation Protocol (SCAP), Evaluate STIG, STIGMAN, EMASSter]. Use of Enterprise Mission Assurance Support Services (eMASS) and similar RMF repositories.
• Setup and execute A&A Business Rules, Standard Operating Procedures (SOP)s, Concept of Operations (CONOP)s, and Plans.
• Perform Contingency planning, training and testing.
• Establish/interrupt Firewall Policy.
• Identify Interrupt, register Ports & Protocols.
• Review Hardware / Software, network boundaries, flow diagrams and technical drawings.
• Identify interrupting information in the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.
• Advise on the proper method to mitigate vulnerabilities.
• Produce executive documents, reports, project plans and plan of action and milestones (POA&M).

Qualifications

Minimum of seven (7) years of experience in CS/A&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, or developing plans. KSAs include:

• Qualified and registered as a Navy Qualified Validator (NQV)
• Expert knowledge of and experience with CS/RMF requirements as defined by Public Laws, National, DoD, and DON [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
• Expert and Mastery levels with institutional knowledge on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
• Experience in certifying and accrediting DON information systems and networks, as well as Platform IT.
• Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information

Education

Bachelor's degree in an IT related discipline OR Level II Certification (Security+ or better) AND a minimum of seven (7) years of experience.

Certifications

• Active Security + CE or higher
• Active NQV