Security Analyst

About the role

As a Security Analyst, you will assist the Subject Matter Expert (SME) and Cybersecurity Engineers with Risk Management Framework (RMF) related activities including Security Control Assessments (SCA) and assisting system owners in the transition to RMF compliance. This position is a critical contributor to meeting Empower AI’s mission: to deliver innovative, cost-effective solutions and services that enable our customers to rapidly adapt to dynamic environments. The role is located in Fort Huachuca, Arizona and requires an active Secret clearance.

Responsibilities

• Perform a variety of routine project tasks applied to specialized technology problems under close supervision (e.g., logic design, circuit design, I/O design, firmware development, computer architecture analysis and design, network structure design).
• Responsible for program coding, testing, debugging, patching, and documentation.
• Analyze user requirements, concept of operations documents, and high-level system architecture to develop system requirement specifications.
• Guide users in formulating requirements, advise alternative approaches, and conduct feasibility studies.
• Integrate software, systems, and electronic processes or methodologies to resolve total system problems or applications.
• Edit and manage written cybersecurity deliverables, including Risk Management Framework (RMF) packages and associated artifacts.
• Assess Department of Defense Information Systems against RMF security controls in accordance with DoDI 8500, DoDI 8510, and NIST SP 800-53 Revision 5.
• Develop and review RMF documentation and artifacts such as Configuration Management Plans, Network Infrastructure Plans, Business Continuity and Disaster Recovery Plans, Plan of Action and Milestones (POA&Ms), topology diagrams, and supporting policies.
• Support Assess and Authorize (A&A) activities.
• Interview technical SMEs and non-technical management personnel to ascertain the security posture of an Information Technology (IT) system.
• Evaluate IT devices for Security Technical Implementation Guide (STIG) compliance using ACAS/Nessus, SCAP Compliance Checker (SCC), and manual checklist reviews.
• Provide thorough technical written explanations and proof to ensure STIGs comply with NIST SP-800-53.
• Apply STIGs on baseline environments consisting of a variety of software and devices to ensure security compliance with NIST SP-800-53.
• Manage packages in Enterprise Mission Assurance System (eMASS) based on NIST SP-800-53 requirements and Control Correlation Identifiers (CCI) outlined in CNSSI 1253.

Requirements

• Active Secret clearance.
• Minimum of 3 years of Cybersecurity experience.
• Bachelor’s degree or equivalent combination of education and related work experience.
• Security+ certification required.

Physical Requirements

• Sitting for long periods.
• Standing for long periods.
• Moving throughout an office and between several buildings.
• Stooping, kneeling, crouching, or crawling as required.

About Empower AI

Empower AI provides federal agency leaders with tools to elevate workforce potential through meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. The Empower AI Platform® offers a practical, sustainable path for clients to achieve transformation aligned with their mission, operations, and resources. Empower AI is recognized as a 2024 Military Friendly Employer, reflecting its commitment to hiring and supporting active-duty and veteran employees.