A Bachelor of Science degree plus at least 10 years of relevant work experience, or a high school diploma with a minimum of 15 years of relevant work experience.
CISSP or CompTIA Security+ certification.
At least 6 years of experience in cyber security engineering and assessments, systems engineering, or project management.
An active security clearance.
Demonstrated experience performing Information System Security Engineer and/or Information System Security Officer work.
Demonstrated experience in technical writing.
Working knowledge of NIST SP 800-53, 800-60, 800-37, 800-18, 800-160, 800-39, OMB Circular A-130, CNSS, and FISMA.
Responsibilities
Provide expertise in cyber security engineering, the Navy Risk Management Framework process, validation, and systems engineering.
Support the customer's ship class with cyber security engineering and testing using automated and manual methodologies such as Evaluate STIG and eMASSter.
Support Program of Record systems on ships for hosting and information collection.
Support security engineering and accreditation across all domains for the ship class.
Process daily eMASS requirements, including POA&Ms, IAVAs, Control Test Results, CCIs, Categorization forms, PPSMs, SAPs, SLCMs, and Inheritance updates.
Author Risk Management Framework policies for routing through the program office and Authorizing Official.
Create Conditional Access Requests and High-Risk Escalations for Information System Owners to route through CSRD.
Complete Department of the Navy Application and Database Application System updates.
Test and correlate STIGs and SRGs, mapping results to Risk Management Framework policy and Standard Operating Procedures.
Create Department of Defense-approved diagrams, including Accreditation Boundary, Security Architecture using Defense in Depth, and Information Flow Management.
Desired Qualifications
Experience with Department of Defense processes and procedures, United States Navy surface ship systems, AWS or Azure Government cloud implementation, and IATO/ATO testing and documentation.
Overview
R&P is seeking a Cyber Security Analyst to support the fleet modernization efforts of our Navy Program Office client.
Responsibilities
Provide expertise in cyber security engineering, Navy Risk Management Framework (RMF) process, and validation, and systems engineering.
Support customer’s ship class with cyber security engineering and testing. Automated & manual methodology such as Evaluate STIG and eMASSter.
Support customer with Program of Record (POR) systems on the ships for hosting and information collection.
Support customer with security engineering and accreditation of all domains for of class ships.
Process daily requirements in eMASS to include POA&Ms, IAVAs, Control Test Results (Control Correlation Identifiers [CCIs]), Categorization forms, PPSMs, SAPs, SLCMs and Inheritance updates.
Author RMF policies to be routed through program office & AO.
Create Conditional Access Requests (CARs) & High-Risk Escalations (HREs) for ISOs to be routed through CSRD.
Complete DON Application and Database Application System (DADMS) updates.
Test and correlate STIGs and SRGs, mapping results to RMF policy and Standard Operating Procedures (SOPs).
Create DoD approved diagrams to include Accreditation Boundary, Security Architecture (Defense In Depth), and Information Flow Management.
Qualifications
Bachelor of Science degree plus at least 10 years of relevant work experience OR a High School diploma with a minimum of 15 years of relevant work experience.
CISSP or CompTIA Security+
6+ years of experience in Cyber Security Engineering and Assessments, systems engineering, or project management.
Active Security Clearance
Demonstrated experience in ISSE and/or ISSO work.
Demonstrated experience in technical writing.
Working knowledge of NIST SP 800-53, 800-60, 800-37, 800-18, 800-160, 800-39, OMB Circular A-130, CNSS and FISMA.
Experience with DoD processes and procedures, U.S. Navy surface ship systems, AWS/ Azure Government cloud implementation, IATO/ATO testing, documentation preferred.
EEO Statement
R&P Technologies provides equal opportunity for all persons and prohibits discrimination in employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability (including pregnancy, childbirth or related medical conditions), veteran or marital status, or any other factor prohibited by law. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation, and training.
R&P maintains an Affirmative Action Plan to establish fair access to employment opportunities and to create a work community that is an accurate reflection of the qualified workforce. Due to security clearance requirements, U.S. citizenship is required for most positions
Salary
R&P offers a highly competitive compensation package that includes contributions towards health insurance, 401(k) matching, and other non-salary benefits. Exact salary will be commensurate with experience and qualifications.