Information Security Analyst I

Responsibilities

• Assist the Program Manager and Cybersecurity Engineers with Risk Management Framework (RMF) related activities including Security Control Assessments (SCA).
• Assisting system owners in the transition to RMF compliance.
• Assess DoD Information Systems against the RMF security controls IAW DoDI 8500, DoDI 8510 and NIST SP 800-53.
• Develop and review RMF documentation and artifacts such as Configuration Management Plans, Network Infrastructure Plans, Business Continuity and Disaster Recovery Plans, Plan of Action and Milestones (POA&Ms), topology diagrams and all supporting policies in support of RMF A&A activities.
• Interview technical Subject Matter Experts (SMEs) as well as non-technical management personnel to ascertain the security posture of an IT system.
• Evaluate a wide array of IT devices for Security Technical Implementation Guide (STIG) compliance using ACAS/ Nessus, SCAP Compliance Checker, and manual checklist reviews.
• Apply STIGs to a variety of devices to ensure compliance.
• Experience with eMASS and a strong understanding of the CNSS 1253 CCIs.

Qualifications

• Current/active Secret clearance or ability to obtain.
• Highly prefer those with an active Secret.
• Bachelor's degree or equivalent combination of education and experience 3 years cybersecurity experience (degree can be substituted for experience).
• Security+ certification required.

About Empower AI

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm’s overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.