Information Security Analyst

Information Security Analyst – General Dynamics Information Technology

Join to apply for the Information Security Analyst role at General Dynamics Information Technology
.

Advance your career while impacting our national security in cyber as an Information Security Analyst Principal e, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

GDIT has an opportunity for an Information Security Analyst Advisor to support U.S. Army Europe on our EMITS program team in Grafenwoehr, Germany.

The Information Security Analyst performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web‑based security.

• Verify systems in APMS and process each accreditation package in eMASS under the RMF.
• Collect artifacts and develop/refine COOP/DRP;
  System Security Plans and Standard Operating Procedures as needed to ensure compliance with NIST SP 800-53 and CNSSI 1253.
• Ensure all IA/Cybersecurity Controls for assessment and authorization are met and ultimate submission of package to the AO for an Approval to Operate on all software and hardware.
• Perform Security Control Assessor (SCA‑V) duties.
• Perform RMF Assessment and Authorization (A&A) validations.
• Perform pre‑validation A&A that includes performance of A&A testing and vulnerability scanning in order to validate IA policy; regulation;
  Security Technical Implementation Guide (STIG); and Best Business Practice (BBP) compliance.
• Generate Evaluation Risk Reports and scorecards.
• Perform computer security incident response activities for a large organization; coordinate with other government agencies to record and report incidents.
• Monitor and analyze intrusion detection systems (IDS) to identify security issues for remediation.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough reviews and analyses of relevant event detail and summary information.
• Evaluate firewall change requests and assess organizational risk.
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems.
• Assist with the implementation of counter‑measures or mitigating controls.
• Ensure the integrity and protection of networks; systems; and applications by technical enforcement of organizational security policies through monitoring of vulnerability scanning devices.
• Perform periodic and on‑demand system audits and vulnerability assessments, including user accounts, application access, file system and external web integrity scans to determine compliance.
• Prepare incident reports of analysis methodology and results.
• Provide guidance and work leadership to less‑experienced technical staff members; may have supervisory responsibilities.
• May serve as a technical team or task leader.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required.

• Education: Bachelor’s Degree in Computer Science or a related technical discipline; or equivalent combination of education, professional training, or work experience.
• Experience: 8–10 years of related experience in data security administration; 2 or more years of direct C&A/A&A experience.
• Technical skills: IAM Level III certification required (CISSP/CISM/GSLC); experience performing as an ACA/SCA‑V; experience with cloud technology (A&A).
• Security clearance: Active Secret Clearance with ability to obtain a Top Secret.
• US citizenship: Required.
• Additional role requirements: Must be approved for German TESA; must obtain ITIL Foundation within 90 days of hire. Position may occasionally require physical activity including lifting objects, bending, crouching, and long periods of sitting.

• Work location: DEU Grafenwoehr – US Army Garrison (APC
  140)
• Additional work locations: None listed.
• Scheduled weekly hours: 40
• Travel required: Less than 10%
• Telecommuting options: Onsite
• Sen…