Cyber Security Analyst I at Scientific Research Corporation

Job description

• Providing configuration management (CM) expertise for information system security software, hardware, and firmware • Working closely with system ISSO and ISSM to maintain operational security posture • Supporting the RMF process activities and related documentation for IATT and ATO • Utilizing fundamental knowledge of entire process of moving form IATT to ATO • Must currently hold a DoD 8570-compliant IAT II certification (SSCP or Security+CE with appropriate CE/OS certificate), CE/OS certificate may include Windows or Linux • A minimum of five years of experiencing configuring and managing Linux Operating Systems in an automated manner using tools such as Ansible • A minimum of five years of experience with cyber security hardening and assessment tools to include DISA STIGs, ACAS, Nessus and Security Content Automation Protocol (SCAP) • Strong IT security background certifications (CISSP, CISM, CGRC, ISSEP, CEH) • Be a self-starter who is accountable and requires minimal direction and supervision • Be open to new and innovative ideas and processes • Strong Linux environment experience • Automation of system configurations on Linux Operating Systems (i.e Ansible, Puppet, Chef) • Security Technical Implementation Guide (STIG) application and system hardening • Linux Certification i.e. Linux+ • Knowledge of cyber security tools utilized by NIWC i.e ACAS, evaluateSTIG, eMASSter, and Grype/Anchore • Designing and developing security designs for existing (and new) requirements • Applying patches to the systems using existing automated tools or improved automation processes • Reviewing and remediating POA&M items in an automated manner and provides advice on the impacts of the system changes SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY • Up to 10% Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law. Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Requirements

Must-haves

Providing configuration management (CM) expertise for information system security software, hardware, and firmware
Working closely with system ISSO and ISSM to maintain operational security posture
Supporting the RMF process activities and related documentation for IATT and ATO
Utilizing fundamental knowledge of entire process of moving form IATT to ATO
Must currently hold a DoD 8570-compliant IAT II certification (SSCP or Security+CE with appropriate
CE/OS certificate), CE/OS certificate may include Windows or Linux
A minimum of five years of experiencing configuring and managing Linux Operating Systems in an automated manner using tools such as Ansible
A minimum of five years of experience with cyber security hardening and assessment tools to include DISA STIGs, ACAS, Nessus and Security Content Automation Protocol (SCAP)
Strong IT security background certifications (CISSP, CISM, CGRC, ISSEP, CEH)
Be a self-starter who is accountable and requires minimal direction and supervision
Be open to new and innovative ideas and processes
Strong Linux environment experience
Automation of system configurations on Linux Operating Systems (i.e Ansible, Puppet, Chef)
Security Technical Implementation Guide (STIG) application and system hardening
Linux Certification i.e. Linux+
Knowledge of cyber security tools utilized by NIWC i.e ACAS, evaluateSTIG, eMASSter, and Grype/Anchore
Designing and developing security designs for existing (and new) requirements
Applying patches to the systems using existing automated tools or improved automation processes
Reviewing and remediating POA&M items in an automated manner and provides advice on the impacts of the system changes
SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY
Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

accessibility

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off