Senior Information Assurance Analyst

SMX is seeking a Senior Information Assurance Analyst with a DoD Secret clearance to join our growing team in Key West, Florida!

The Senior Information Analyst will perform assessment and authorization coordination, advise and assists the client with Risk Management Framework (RMF) and develop a Plan of Action and Milestones for resolving network deficiencies. The duties of this task include assessing network compliance against controls listed in DODI 8500.2 and creating A&A packages. The end goal is to ensure the integrity of client systems by identifying and mitigating potential shortcomings and vulnerabilities.

Additionally, the Senior Information Assurance Analyst will perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and liaise with network and system administrators to correct identified deficiencies and scan (or review scans) for new systems and applications being introduced into the DoD environment.

Essential Duties And Responsibilities

Analyze, evaluate, and build an accreditation roadmap for new and existing AISR networks and systemsDevelop and maintain supporting documentation for new and existing networks, systems, and technologiesDevelop and review the A&A of AISR platforms, systems, services, devices, hardware, and software using the DoD & IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC)Provide DoD & IC RMF subject matter expertise and assist with the development and execution of the RMF program at USSOUTHCOM, and its Component CommandsMaintain, track, and validate client connection approval packagesPerform risk and vulnerability assessments of IT and IS for accreditation; prepare risk assessment reports for submission to the Security Controls Assessor/Certification Authority (SCA/CA) and Authorizing Official/Designated Accrediting Authority (AO/DAA) in accordance with policies, procedures, and regulationsAssist USSOUTHCOM, and its Component Commands with the enforcement of A&A, as well as DoD connection standards for networks and systemsTrack and maintain A&A databases, web sites and tools to ensure that networks, systems, and devices are properly documented and managed from a security perspectiveDevelop and maintain an Information Security Continuous Monitoring (ISCM) Plan. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&A, connection approvals, and waiver requestsPerform network security authorization, as well as the application and execution of policy, including project management support servicesValidate the patching of systems, perform validation scanning, develop Plans of Action & Milestone (POA&Ms), and report as directed by applicable policies, procedures, and regulationsProvide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.

Knowledge, Skills & Abilities

Required Clearance: SecretAbility to pass a TS/SCI investigationExperience with the US Combatant Commands is requiredDOD Information Assurance Management (IAM) Level 3 certification required within 6 monthsNavy Validator Information Assurance certification is desiredDOD Information Assurance Technical (IAT) Level 2 certification requiredWorking knowledge of the Defense Information Assurance Certification and Accreditation Process (DIACAP) and Risk Management Framework (RMF)Previous Information Systems Security Manager and Insider Threat experience is desiredKnowledge of the Telos Xacta or eMASS system is desired. Must have excellent communications skill (written and oral) and interpersonal skillsKnowledge and experience with DOD IA processes and policies (e.g., CJCSM 6510.01, Incident Response and other IA policies)

Required Education & Experience

Bachelor’s Degree in computer or systems science discipline preferredSix (6) years of progressive, relevant experience or equivalent combination of education and experienceExperience in lieu of degree will be considered

#cjpost

At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.

We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.

SMX is committed to hiring and retaining a diverse workforce. All qualified candidates will receive consideration for employment without regard to disability status, protected veteran status, race, color, age, religion, national origin, citizenship, marital status, sex, sexual orientation, gender identity or expression, pregnancy or genetic information. SMX is an Equal Opportunity/Affirmative Action employer including disability and veterans.

Selected applicant will be subject to a background investigation.