JITTIC-N Information Systems Analyst 3 - 21588 - HII Mission Technologies Division

Who We Are

HII's Global Security group is seeking an Information Security Analyst 3 at the Joint Integrated Test and Training Center – Nellis (JITTC-N), Nellis, AFB, NV to conduct technical analysis of product implementations, modifications, and enhancements to product in accordance with specific customer specifications and implementations.
 
This position is part of a team that provides on-site M&S support to establish and deliver high-end Advanced Tactics, Training, and Test capability for Government personnel operating under USAFWC/ACC; Provide mission execution and support to broad range of JITTC-N simulator activities and JSE. This position will perform management responsibilities, as required, by company leadership. This role is not eligible for remote or hybrid work and is executed on-site. 

What You Will Do

• Draft, review, and update Risk Management Framework (RMF) artifacts required for achieving an Authority to Operate (ATO) for emerging systems. 

• Developing and updating the system security system control traceability matrix (SCTM), the system security plan (SSP), managing and controlling changes to the system, assessment and authorization (A&A) package and assessing the security impact of those changes. 

• Write System Security Plans (SSP), Plan of Actions & Milestones (POA&M), Continuous Monitoring Plan, Risk Assessments, Privacy Impact Analyses (PIA), and supporting documentation for systems subject to NIST SP 800-53 

• Lead Security Assessment and Authorization processes and procedures.

• Conduct technical training and product briefings with customers, vendors, and company representatives and perform supervisory responsibilities, as required, by company leadership.

• Report all cybersecurity incidents to the program Information Systems Security Managers (ISSM) through reports and briefings.

• Troubleshoot technical problems and issues, determine technical solutions in accordance with product and customer specifications, and recommend actions to company or customer representatives for coordinative product solutions.

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies. 

• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information. 

• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades. 

• Evaluate security solutions to ensure they meet security requirements for processing classified information. 

• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system, program, or enclave.

What You Must Have

• 5 years relevant experience with Bachelors in related field; 3 years relevant experience with Masters in related field; 0 years' experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 9 years relevant experience.

• Must have a current or active DoD TS/SCI DoD clearance.

• Experience with STIGS, SCAP, SCC, RMF Bodies of Evidence, JSIG, vulnerability scanning, logging tools, and LogRhythm, ACAS/NESSUS scan tools, McAfee HBSS.

• Excellent oral and written communication skills, collaboration skills, and experience in presenting cybersecurity issues to all levels of management, as well as non-technical staff.

• Strong work ethic demonstrated self-starter with the ability to work in a fast paced, team-oriented environment.

• Must have strong interpersonal skills and be capable of designing and developing and documenting network and systems.

Bonus Points For...

• Prefer candidates with a bachelor's degree in either Computer Science, Information Systems Management, Information Technology, and five (5) years of relevant experience.

• An advanced degree in a related field may be substituted for 2 additional years of experience.

• Strong understanding and experience with the Risk Management Framework, JSIG, and RMF Bodies of Evidence.

• Experience with any combination of the following: cybersecurity, network security architecture, system hardening, auditing/compliance methods, Information Technology, and/or systems security engineering concepts such as topology, protocols, components, and/or principles (e.g., application of defense-in-depth). 

• Experience supporting cybersecurity compliance as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications.

Physical Requirements

Office and industrial, capable of climbing ladders and tolerating confined spaces and extreme temperature variances. Lifting and moving materials may be required. Ability to lift and carry up to 50 pounds occasionally and/or up to 25 pounds frequently.