Information Systems Security Analyst - SCSTC

Information Systems Security Analyst - SCSTC EOE Statement Technology Automation & Management (TeAM), Inc. TeAM is looking for highly motivated and highly skilled individuals who are ready for exciting opportunities with a growing company. For more than a quarter of a century, we've built our reputation as a premier solutions provider to the Federal Government, and eagerly seek creative problem solvers to join our TeAM. We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. Mission Objectives The Information Systems Security Analyst advances the cybersecurity posture, compliance, and Authorization to Operate (ATO) status of complex DoD information systems within a dynamic mission environment. This position serves as a key technical lead for Risk Management Framework (RMF) Assessment & Authorization and enterprise cyber defense operations, ensuring all DoD networks, systems, and data are consistently protected in accordance with federal regulations and best practices. Position Responsibility Summary RMF Assessment & Authorization (A&A): Advise and assist the ISSM/ISSO in executing all phases of the RMF process for command systems. Develop Security Assessment Plans (SAP), conduct security categorization reviews, and maintain/update RMF artifacts (e.g., System Security Plans, Security Assessment Reports, Plan of Action & Milestones [POA&Ms], Risk Acceptance Recommendation Reports, Residual Risk Statements). Prepare comprehensive Security Authorization Packages for Authorizing Officials. Conduct security control assessments, vulnerability analyses, remediation reporting, and maintain accurate tracking of status and documentation. Continuous Monitoring, Vulnerability & Compliance: Execute recurring inspections, technical reviews, and audits of system/network controls. Ensure compliance with DoD RMF, NIST SP 800-53, NIST SP 800-171, DISA STIGs, and DFARS View phone number on click.appcast.io. Review, document, and enhance IA protective and corrective measures; maintain vulnerability remediation and asset management (VRAM) records. Support and track site visits, inspections, system accreditations, and implement corrective actions based on network scan analysis. Incident Response, Reporting, & Escalation: Monitor network/system activity and logs for threats and anomalies. Lead or support incident response: containment, remediation, analysis, and reporting/escalation to appropriate authorities. Ensure reporting of cyber incidents and support compliance with DoD notification and investigative protocols. Security Integration & Design: Embed security engineering principles into all network, system, and application design and configuration changes. Provide technical recommendations for system hardening and mitigation of emerging threats. Contribute to secure acquisitions, IT supply chain risk management, and assessments of new or emerging technologies for security impact. Program Documentation & Communication: Prepare and maintain technical documentation, status reports, executive briefings, and CDRL deliverables (SAP, SAR, POA&M, etc.). Participate in cybersecurity meetings, provide technical consultation to leadership, and prepare minutes/trip reports when required. Functional & Mission Support: Translate business and operational requirements into actionable cybersecurity solutions. Promote continuous process improvement, develop SOPs, and ensure security architecture aligns with mission objectives. Position Requirements Minimum Required Qualification These qualifications are mandatory for consideration Experience At least four (4) years of direct, recent experience in cybersecurity operations and RMF execution supporting complex DoD, Defense, or Federal information systems. Education and Credentials Education: [Specify minimum education requirement if listed in RFP/J.02; if not, enter "relevant field or as required by the government"]. Certifications: Must hold a current DoD 8570.01-M IAT Level II certification (e.g., Security+, GSEC, CySA+, SSCP) at start and maintain throughout employment. Years of Experience: 4+ years Clearance Active Secret security clearance (final, not interim) required at start and throughout employment. Technical Proficiency Deep understanding of NIST RMF, NIST SP 800-53/800-171, DISA STIGs, and DoD cybersecurity/compliance policies. Expertise in encryption technologies, intrusion detection/response, vulnerability assessment tools, and disaster recovery planning. Demonstrated skills in network traffic analysis, system/application threat mitigation, and secure system/network configuration. Experience producing enterprise security documentation, RMF artifacts, and technical reporting. Soft Skills Strong written and verbal communication, technical briefing, and report‑writing skills. Ability to train/mentor staff, facilitate cyber awareness, and interface with technical/non‑technical personnel. Organized, detail‑oriented, and proactive in risk identification and process improvement. Location/Travel Able to work full‑time onsite at Dahlgren, VA (or assigned DoD site), with up to 10% travel as required. Optional/Value-added Qualifications Experience supporting RMF/ATO processes or cyber defense programs at multiple DoD installations. Experience with automation of security assessments, vulnerability scanning, or continuous monitoring tools. Leadership roles in cybersecurity incident response teams or cyber threat hunt initiatives. Optional/Value-added Additional Credentials Education: Advanced degree in cybersecurity, information assurance, computer science, or a related field. Certifications/Training: CISSP, CISM, CEH, or other advanced DoD- or industry-recognized security certifications. Duty Location: Onsite at Dahlgren, VA (other locations as assigned) Work Arrangement: Onsite (no remote work authorized unless approved in writing by the Government) Travel Requirements: Up to 10% (site visits, meetings, or as required by the contract) Minimum Security Clearance Required: Active Secret Full-Time / Part-Time: Full-Time This position is currently accepting applications. #J-18808-Ljbffr Technology,-Automation,-and-Management,-Inc.