NextGen Federal Systems

Federal IT solutions, software, cyber security

Information Security Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeWashington, DC, USANo salary listedIn-person

About the Job

Requirements

Significant Information Systems Security Officer experience is required in lieu of a degree; the posting specifies 2 years.
A minimum of 7 years of experience developing System Security Plans is required.
A minimum of 7 years of experience managing and tracking Plans of Action and Milestones is required.
A minimum of 7 years of experience performing continuous monitoring activities is required.
A minimum of 7 years of experience developing Standard Operating Procedures is required.
A minimum of 7 years of experience understanding the National Institute of Standards and Technology 800-Series is required.
Proficiency with Microsoft Office software, including Word, Excel, PowerPoint, Outlook, and SharePoint, is required.
Positive adjudication from a Customs and Border Protection Background Investigation is required.

Responsibilities

Track and manage Plans of Action and Milestones throughout the remediation cycle, from creation to closure.
Review and approve Technical Requirement Models for software products.
Lead Authority to Operate efforts for assigned Air and Marine Operations systems.
Ensure technical teams adhere to established policies and procedures to meet Department of Homeland Security and Customs and Border Protection compliance requirements.
Ensure audit logs are reviewed periodically in accordance with departmental policy and Security Authorization documentation, such as weekly or daily.
Develop, analyze, and update System Security Plans, Risk Assessments, Privacy Threshold Analyses, Privacy Impact Assessments, System Security Test and Evaluation documentation, and Plans of Action and Milestones.
Document risks and appropriate compensating controls for the Authorizing Official to make risk-based decisions on identified vulnerabilities.
Designate systems and categorize their confidentiality, integrity, and availability using Federal Information Processing Standards Publication 199 and National Institute of Standards and Technology Special Publication 800-60.
Create and update Standard Operating Procedures for process flows and quality enhancements.
Develop an Information Security Continuous Monitoring Strategy to maintain ongoing awareness of information security, the continued effectiveness of security controls, vulnerabilities, and threats, supporting organizational risk management decisions.
Create security impact analysis documents to accompany required changes for Change Control Board approval before changes are made to assigned systems.

NextGen Federal Systems is seeking an Information Security Analyst to join our work supporting our DHS customer in Washington, DC. The ISA will report to the ISSM and provide security and compliance duties to assigned systems stakeholders.

Duties include but are not limited to:

Track and manage POAMs throughout the remediation cycle from creation to closure.

Review and approve Technical Requirement Model (TRM) for software products

Lead Authority to Operate efforts for assigned Air and Marine Operations systems

Ensure technical team is adhering to laid down policy and procedures to meet DHS and CBP compliance requirements.

Ensuring audit logs are reviewed periodically in accordance with departmental policy and the Security Authorization documentation (e.g. weekly or daily)

Develop, analyze and update System Security Plan (SSP), Risk Assessment (RA), Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), System Security test and Evaluation (ST&E) and the Plan of Actions and Milestones (POA&M)

Document risks and appropriate compensation controls for the Authorizing Official to make a risk-based decision on identified vulnerabilities.

Designate systems and categorize its C.I.A using FIPS 199 and NIST SP 800-60

Create update Standard Operating Procedure (SOP) for process flows and quality enhancements

Develop Information Security Continuous Monitoring Strategy to help maintain an ongoing awareness of information security (Ensure continued effectiveness of all security controls), vulnerabilities, and threats to support organizational risk management decisions

Create security impact analysis document to accompany required changes for Change Control Board approval before changes are made to assigned systems

Required Education, Experience and Qualifications:

Significant ISSO experience required, in lieu of degree. (2 years)

A minimum of 7 years of experience in the following:

Developing System Security Plan

Managing and tracking POAMs

Continuing monitoring activities

Developing Standard Operating Procedures (SOP)

Understanding of NIST 800-Series

Proficiency with Microsoft Office software, including Word, Excel, PowerPoint, Outlook, and SharePoint.

Positive adjudication from a CBP Background Investigation.

About NextGen: NextGen Federal Systems is an innovative technology and professional services provider specializing in advanced software solutions and comprehensive mission and business support services. We work in close collaboration with our Customers to truly understand their business and mission goals. Our approach is to design, build, implement, and manage solutions that measurably improve our client’s organizational performance. We have established and foster a corporate culture where we:

Treat employees with fairness and respect regardless of their position, sexual identity, race, or tenure.
Communicate the importance of our mission and our employees’ contributions to it, ensuring they understand how their job role contributes to the greater good.
Openly promote and communicate our ideas for change and adaptability.
Strive to achieve results as an organization.
Hold employees accountable to their commitments and provide incentives that encourage positive and productive behaviors.
Value the talents and contributions of our employees as the key factor for our success.
Create an environment where people can engage at all levels.
Encourage people to take risks and allow them to make mistakes.

RefID: D01x

About the Company

NextGen Federal Systems

Federal IT solutions, software, cyber security

NextGen Federal Systems provides IT solutions and services for the Department of Defense, federal agencies, and commercial clients, including software development, research and development, enterprise IT systems engineering, and cyber security and data management. Its offerings combine services and solution development delivered through agile, mature processes to produce working systems that analysts and warfighters rely on, while maintaining cost-effective delivery. The company differentiates itself with ISO 9001 certification, CMMI-DEV and CMMI-SVC Level 3 appraisals, government-domain focus, rapid growth, and a blended services/solutions model across multiple U.S. offices. Its goal is to tackle complex defense and intelligence challenges by providing reliable, secure, and scalable IT solutions that meet mission needs.

Company size: 201-500
Company stage: Grant
Total funding: $2.6M
Headquarters: Morgantown, WV
Founded: 2011

Recently Posted Jobs

Explore more opportunities at NextGen Federal Systems

See more jobs