Gray Tier Technologies

Senior Cybersecurity Analyst

Full-Time in Suffolk, VA %LABEL_POSITION_TYPE_REMOTE_HYBRID% - Senior

Gray Tier Technologies is looking for a Senior Cybersecurity Analyst (CSA) or ISSE with RMF expertise to join our team in Suffolk, VA. The Senior CSA must be local to the Tidewater region.  **TS/SCI Required**

RESPONSIBILITIES:

  • Plan and implement safety measures by collecting information about security incidents and outcomes.
  • Understanding of various tactical radios AN/PRC-117G, AN/ARC-210 and AN/USC-61 systems with Mobile User Objective System (MUOS) software changes and over-the-air testing of ground systems.
  • Processing of RMF A&A packages related to various MUOS ground systems Authorized To Connect (ATC).
  • Review and assess system security requirements and associated verification methods per RMF standards. 
  • Cloud experience
  • Support security planning, assessment, risk analysis, and risk management using the Risk Management Framework (RMF).
  • Executing the customer's continuous monitoring steps for authorized systems to ensure that security controls are adequately maintained, and system users adhere to policies.
  • Provide security planning, assessment, risk analysis, and risk management.
  • Recommend system-level solutions to resolve security requirements. 
  • Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
  • Knowledge of signal quality through the use of circuit and systems from end to end performance tests.
  • Some travel may be required.

QUALIFICATIONS:

  • Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university. 
  • Minimum five (5) years experience in IT with a focus in RMF and A&A package development experience, preferably working as an ISSE or in a similar information system security role.
  • Active Top Secret/SCI clearance.
  • Experience with the Risk Management Framework (RMF) and NIST SP 800-53 rev 4 as an Information Systems Security Engineer (ISSE). 
  • Experience working in a DoD environment structure and system acquisition. 
  • Assist in developing schedules and Plans of Actions and Milestones (POA&M) for producing deliverable products and reports within customer-directed timelines. 
  • Full understanding of Navy RF of various systems and ability to coordinate and support RF related projects from beginning to end - until ATO is approved. 
  • Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 611 Advanced:
  • Military training: NEC 741A Information Systems Security Manager OR working knowledge of DODD 8500.1, DODI 8500.2, DODI 8510.01, NIST SP 800-37, NIST SP 800-53, and other Cybersecurity guidance. 
  • CASP, CISM or CISA certification