Cybersecurity Analyst (3959)

About the role

Navarro Research and Engineering is recruiting a Cybersecurity Analyst (subcontractor professional) for positions in West Mifflin, PA or West Milton, NY, with work locations at Bettis or Knolls. An active DOE clearance or DOD equivalent is required, and U.S. citizenship is mandatory due to government contract requirements. Navarro is an award‑winning provider of turnkey solutions delivering nuclear, environmental and technical services to federal agencies, commercial enterprises and private clients, supporting organizations such as the Department of Energy, National Nuclear Security Administration, Department of Defense and NASA.

Responsibilities

• Execute all aspects of National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF).
• Assist information system owners with development of System Security Plans (SSPs) and Security Assessment Reports (SARs) using the existing RSA Archer application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization.
• Assist in the development of Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process.

Requirements

• At least four years of combined experience in roles such as security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM).
• At least two years of experience supporting development of information system security authorization packages in accordance with RMF (NIST 800‑37, 800‑53, 800‑53a).
• At least two years of experience working with the Federal Risk and Authorization Management Program (FedRAMP).
• Security+ Certification.

Skills

• Experience with the RSA Archer application.
• At least two years of experience working on IT security project teams.
• At least one year of experience managing IT projects.
• Knowledge of IT infrastructure and services (data centers, physical and virtual servers, local and wide area networking components, cloud Infrastructure/Platform/Software as a Service, etc.).
• Knowledge of security policies such as NIST Special Publications, Security Technical Implementation Guides (STIGs), DOD Cloud Computing Security Resource Guide (SRG).
• Knowledge of infrastructure security, endpoint protection, and vulnerability management tools.
• Previous work authorizing information systems within a classified DoE or DoD environment.
• Familiarity with NIST 800‑171.
• Certified Information Systems Security Professional (CISSP) certification.
• Certificate of Cloud Security Knowledge (CCSK) certification.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation & Public Holidays)
• Short Term & Long‑Term Disability