Overview
Information Security Analyst Jobs in Fort Novosel, AL at Apex Systems
Title: Information Security Analyst
Company: Apex Systems
Location: Fort Novosel, AL
Information Security Analyst
Contract Details:This is a 6-month contract position with permanent conversion with the client. The pay for this position is $70,000 annually. This role is 100% onsite.
Location:Fort Novosel, AL, United States
Position Overview:
The Information Security Analyst is responsible for maintaining the security posture of our program through compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS). This role requires a deep understanding of cybersecurity principles, risk management, and familiarity with various compliance frameworks.
Required Skills:
At least 3-4 years of experience in cybersecurity or a related field.
Bachelor’s degree or equivalent experience.
Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) Implementation Policies/Directives and Department of Navy (DON) cybersecurity Policies/Directives.
Experience with automated tools such as ACAS, Center for Internet Security (CIS) Benchmark, Security Content Automation Protocol (SCAP), and Retina.
Proficiency in cybersecurity, Assessment & Authorization (A&A), and RMF documentation development and support.
Key Responsibilities:
Conduct compliance checks and vulnerability scans using ACAS to ensure the security of the program.
Implement and manage the ACAS suite to perform regular vulnerability scans across the program’s network infrastructure.
Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders.
Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets.
Collaborate with IT and development teams to remediate identified vulnerabilities promptly.
Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST).
Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes.
Work with the compliance team to prepare for internal and external audits.
Provide technical guidance on security best practices and assist in security awareness training initiatives.
Stay current with emerging security threats, vulnerabilities, and controls.
Manage the Plan of Action and Milestones (POA&M).
Prepare, review, and update Risk Management Framework (RMF) documentation.
Qualifications:
Must be a U.S. citizen able to obtain and/or maintain a Department of Defense Secret security clearance.
Certifications (IAT Level II):One of the following is required:
Security+ CE
GIAC Security Essentials Certification (GSEC)
Security Certified Network Professional (SCNP)
System Security Certified Practitioner (SSCP)
