Astrion

Integrated defense, security, and space technology

Senior Management Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-time$120k /yr

About the Job

Requirements

A bachelor's degree in engineering or a related technical field is required.
At least 10 years of experience working as an Information Systems Security Officer and creating and maintaining Assessment and Authorization documentation, including system security plans, security control assessments, and plans of action and milestones to support Authorization to Operate decisions is required.
A valid Security+ CE certification is required, and the candidate must meet the position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technical Level 2.

Responsibilities

Ensure the cybersecurity architecture and design of the customer's systems are functional and secure, with the ability to identify, protect, detect, respond to, and recover from cyberattacks.
Develop and sustain enterprise Risk Management Framework accreditation packages, from concept development and contract pre-acquisition through contractor design and accreditation.
Develop and sustain cloud environments from concept development and contract pre-acquisition through contractor design and accreditation.
Provide Information System Security Operations support, integration services, technical assessments, and solutions to enable cybersecurity and Defensive Cyberspace Operations.
Apply expert engineering knowledge of security solutions to design, develop, and implement solutions consistent with enterprise architecture security policies and supportive of full-spectrum military cyberspace operations.
Oversee system and network designs encompassing multiple computer and network devices with differing data protection and classification requirements.
Develop Defensive Cyberspace Operations and incident response tactics, techniques, and procedures to monitor and protect systems from cyberattacks.
Apply Secure Technical Implementation Guide best practices to classified and unclassified information systems, networking equipment, and applicable software and applications.
Serve as the information security interface to government customers and approving authorities across the Department of Defense and Intelligence Communities.
Perform vulnerability and risk assessment analysis to support authorization and accreditation.
Prepare and review system security plans, risk assessment reports, Authorization to Operate packages, policies, and Security Controls Traceability Matrices.
Conduct periodic reviews and evaluations of required information systems policies and procedures.
Support information systems security inspections, tests, and reviews.

Desired Qualifications

Cloud design and security experience is highly desired.
Cyber Workforce Management Program Information Assurance Management Level II certification is highly desired.
Demonstrated understanding of Cybersecurity Service Provider and Defensive Cyberspace Operations operations and tools is desired.
Familiarity with Defense Information Systems Agency Security Technical Implementation Guides and system configuration validation and verification against documented security requirements is desired.
Familiarity with cloud-based systems, operating systems, databases, networking, firewalls, network intrusion detection and prevention systems, and host-based intrusion detection and prevention systems is desired.
Familiarity with program security responsibilities, including operations security, program protection, personnel security clearances, security training and education, and classification management, is desired.

Overview

Senior Management Analyst

LOCATION: Boulder Colorado
STATUS: Full-Time
CLEARANCE: TS/SCI clearance

SALARY: 120,000 + annually*

*depending on experience, certifications, and qualifications

Astrion is currently seeking a Senior Management Analyst to support Space Systems Command (SSC), Space Sensing Tools Application & Processing (TAP) Lab in Boulder, CO and integration support to the Overhead Persistent Infrared (OPIR) Battlespace Awareness Center (OBAC) at Buckley SFB, Aurora, Colorado.

Work with Information Systems Security Manager (ISSM) to create and maintain Assessment and Authorization (A&A) documentation, including the system security plan, security control assessment, plan of action and milestones to support Authorization to Operate decisions. Capture and refine information security requirement for new systems or for enhanced functionality on existing systems. Provide support for proposing, coordinating, implementing and enforcing information systems security policies, standards and methodologies. Your talents, perspectives, and efforts will contribute directly to the safeguarding of valuable intelligence systems and data, ensuring positive mission outcomes. This position is located in Boulder, Colorado and requires level of effort across multiple domains and security levels.

REQUIRED QUALIFICATIONS / SKILLS

Education: Bachelor's degree in engineering or related technical field (Required).
Experience: 10+ years of experience working Information Systems Security Officer (ISSO) and creating and maintain Assessment and Authorization (A&A) documentation, including the system security plan, security control assessment, plan of action and milestones to support Authorization to Operate decisions. (Required)
Valid Security+ CE Certification. Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technical Level 2. (Required)
Cloud design and security experience. Highly Desired.
Cyber Workforce Management Program (DoDD 8140.01 & DoD 8570.01-m) Information Assurance Management (IAM) Level II certified. Highly Desired
Demonstrated understanding of Cybersecurity Service Provider (CSSP) and DCO operations and tools. Desired
Familiarity with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and system configuration validation and verification against documented security requirements. Desired
Familiarity with cloud-based systems, operating systems, databases, networking, firewalls, Network Intrusion Detection and Prevention Systems (IDS/IPS) and host-based IDS and IPS. Desired
Familiarity with Program Security responsibilities to include but not limited to: OPSEC, Program. Protection, Personnel Security clearances, Security Training and Education, Classification management. Desired

RESPONSIBILITIES

Ensuring the cybersecurity architecture and design of the customer’s systems are functional and secure with the ability to identify, protect, detect, respond and recover from cyber-attack
Developing and sustaining enterprise RMF accreditation packages, from concept development and contract pre-acquisition through contractor design and accreditation
Experience in Developing and Sustaining Cloud environments from concept development and contract pre-acquisition through contractor design and accreditation
Providing Information System Security Operations support, integration services, technical assessments, and solutions to enable cybersecurity and DCO
Applies a combination of expert engineering knowledge of security solutions to design, develop and/or implement solutions to ensure they are consistent with enterprise architecture security policies and support full spectrum military cyberspace operations
Overseeing system and network designs that encompass multiple computer and network devices to include those with differing data protections/classification requirements
Developing Defensive Cyberspace Operations and incident Response Tactics, Techniques and Procedures to monitor and protect the system from cyber-attacks
Apply Secure Technical Implementation Guide (STIG) best practices to classified and unclassified information systems, networking equipment, and applicable software/applications
Information Security interface to government customer and approving authorities across the DoD and Intelligence Communities
Perform vulnerability/risk assessment analysis to support authorization and accreditation
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Authorization To Operate (ATO) packages, policies and Security Controls Traceability Matrices (SCTMs)
Conduct periodic reviews and evaluations of required IS policies and procedures
Support IS Security Inspections, tests, and reviews

#CJ

CJ#

About the Company

Astrion

Integrated defense, security, and space technology

Astrion provides integrated technology solutions and services for defense, homeland security, intelligence, and space missions. It covers cyber, software, systems engineering, and mission support, delivered through an “always on” approach and strong execution in demanding environments. The company works directly with customers to deliver impactful results and shape the future of national security and space operations. By combining technical expertise with agility, Astrion differentiates itself through relentless pursuit of bold ideas and end-to-end support across the lifecycle of complex missions. Its goal is to help customers meet critical moments with reliable, tailored solutions that advance capabilities in defense, security, and space.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Washington DC, District of Columbia
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Astrion

See more jobs