Cloud Information Security Analyst
SAIC is seeking a Cloud Information Security Analyst to support IT Service Management efforts for USTRANSCOM at Scott Air Force Base (AFB) in Illinois. This onsite role centers on authorization and assessment activities for cloud and enclave systems, including documentation, control assessment and monitoring, risk assessments, and security and privacy evaluation work.
In this position, you will help coordinate authorization deliverables, manage security profiles through established tools, and support decision-making that impacts system and network security. The work includes preparing for contingency and incident response assessments and aligning security practices to NIST-based evaluations.
Responsibilities:
Develop and coordinate authorization documentation, includingSystems Categorization , Systems Security Plan, andsystems risk assessment.
Supportcontrol assessment, reporting, and monitoringprocesses using theCyber Security and Assessment Management (CSAM)system.
Create and maintain minor and major modification documentation.
Maintain waivers andrisk assessmentsfor the ISSMs.
Assist ISSMs with decisions that affect the security of systems and networks.
Facilitate preparation forContingency/Incident response assessments.
Perform and document risk assessments, including analysis of security vulnerabilities and metrics used to measure associated risk.
Design and develop comprehensiveSystems Security Plansdefining the enclave systems security profile, including infrastructure, policies, and procedures.
Review and validateSystem Test and Evaluation (ST&E)andInterim Authority to Test (IATT)reviews for new and/or legacy systems.
Review and conductNIST-based Self Assessments, identify weaknesses, and develop aPOA&Mfor each weakness based on industry best practices.
Request risk acceptance for vulnerabilities that cannot be remediated or mitigated.
Create and trackPlan of Action and Milestones (POA&M)for mitigation of risks identified viaACASandSTIGprocesses.
Design and developInitial Privacy Assessment (IPA)andPrivacy Impact Assessments (PIAs)for major Federal Government IT systems, and supportIndependent Verification and Validation (IVVs)of security profiles.
Use theeMass toolto manage the system security profile.
UsePPSMtool and processes to register ports, protocols, and services used by the enclaves.
Requirements5+ yearsof experience with aBS(or3+ yearswith anMS ).
0 years with a PhD.
DoD Secret clearanceor higher.
At least oneIAT Level IIcertification: Security+ , CECCNA-Security , CySA+ , GICSP , GSEC , CND, orSSCP.
At least one Computing Environment (CE) certification or certificate aligned to the technical area of responsibility for Network support/defense (for example: Splunk , Cisco , McAfee ) or Operating System (for example: Microsoft , Linux , Solaris , AWS Cloud Practitioner , AWS Solutions Architect ).
Familiarity withAWS cloud concepts and services.
Familiarity withDevOps practices in an agile environment.
TechnologiesCyber Security and Assessment Management (CSAM) system
NIST
POA&M
eMass tool
PPSM tool
ACAS
STIG
System Test and Evaluation (ST&E)
Interim Authority to Test (IATT)
Initial Privacy Assessment (IPA)
Privacy Impact Assessments (PIAs)
Independent Verification and Validation (IVVs)
Splunk, Cisco, McAfee
Microsoft, Linux, Solaris
AWS Cloud Practitioner, AWS Solutions Architect
Security+; CECCNA-Security; CySA+; GICSP; GSEC; CND; SSCP
CAP, CASP+ CE, CISM, CISSP (and Associate), GSLC, CCISO, HCISPP
ITIL Foundations (v4 or higher)
Location, Schedule, and ClearanceLocation: Scott AFB, IL, US (onsite)
Schedule: Full-Time
Shift: Day Job
Travel:
No
Minimum clearance required: Secret
Clearance level must be able to obtain: None
Potential for remote work: ORA_ON_SITE
CompensationTarget salary range: USD80,001 - 120,000per year (based on experience and other factors).