Apply on Employer Site

PiTech Solutions Inc · 6 days ago

Sr. Cyber Security Analyst

Pearl City, HI

Full-time

Onsite

Senior Level, Lead/Staff

12+ years exp

PiTech Solutions Inc is seeking a Senior Cyber Security Analyst to support the US INDOPACOM J73 in Pearl City, Hawaii. The role involves documenting security controls, creating Authority to Operate (ATO) packages, and conducting technical evaluations of information systems to ensure compliance with security standards.

AnalyticsConsultingInformation ServicesInformation Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Loretta Moye

Responsibilities

Documenting security controls in SSP per NIST SP 800-53A rev5

Create Authority to Operate (ATO) packages

Validate vulnerability/risk assessment analysis to support accreditation

Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches

Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation

Review completion and implementation of system additions and enhancements, and makes recommendations to management

Determine system specifications, input/output processes, and working parameters for hardware and software compatibility

Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance

Qualification

Authority to Operate (ATO)Risk Management Framework (RMF)NIST SP 800-53AGovernment Risk Compliance toolsSystem Security Plan (SSP)DoD IAM Level I certificationCloud Security Requirements GuideSecurity Technical Implementation GuideStandard Operating Procedures (SOP)After-Action ReportsPolicyProcedure documentsData Flow Diagrams

Required

Bachelors and eighteen(18+) or Masters and twelve (12+) years of related experience; additional four (4) years of experience accepted in lieu of degree

Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments

Experience using Government, Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, etc.)

Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents

Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented

Strong working knowledge of Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG)

Understanding of the DOD requirements for the Network Topology, System Security Boundary, and Data Flow Diagrams

Must have a current DoD IAM Level I or higher certification (i.e. Security+ CE, Cloud+, CASP+, OR CISSP etc.)

Must have a current Active Secret Clearance with the ability to obtain a TSSCI Clearance

Must be a current US Citizen