Cyber Sec Analyst
Verifying Configuration Management and Tracking Security Update Implementation
Adhering to pre-defined configuration management and change management policies and procedures for authorizing software prior to its implementation on systems
Ensuring systems are operated, used, maintained, and disposed of in accordance with all applicable security policies and practices
Performing cybersecurity testing, analysis, and reporting by conducting the following: Assured Compliance Assessment Solution (ACAS) scans, Security Technical Implementation Guide (STIG) checks, port scanning, application code review, Risk Management Framework (RMF) control review, and Plan of Action and Milestone (POAM)
Supporting RMF Documentation and Continuous Monitoring
Providing in depth analysis on cybersecurity test results, remediation steps, and potential mitigating factor(s)
Supporting the Information System Security Manager (ISSM) and Cybersecurity Lead in meeting all RMF documentation, process, policy, risk assessment, testing, and continuous monitoring requirements per the NIST SP-800 series
Providing RMF support for all future and/or new Assessment and Authorization (A-A)
Collaboration and Communication
Maintaining security reporting compliance requirements outlined in the System Lifecycle Configuration Management (SLCM) Strategy Requirements
Must possess an active Secret clearance and be eligible for a Top Secret/SCI clearance
Must currently hold a DoD 8570-compliant IAT II certification (SSCP or Security+CE with appropriate CE/OS certificate) or be able to obtain within six months
Experience with automation tools (Ansible, Puppet, Chef) preferred
Desired Skills: Experience in a RHEL environment, Experience with Networking Devices, Experience with DevSecOps, Experience with being an NQV, Experience authoring and editing RMF Control Family Plans, Experience with EvaluateSTIG and/or STIGManager
Clearance and Travel Information
Must possess an active Secret clearance and be eligible for a Top Secret/SCI clearance
Travel Requirements up to 10% travel
About Us
Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more.