News

Responsibilities

The Information Assurance C&A Analyst’s primary job responsibilities will include:

Fully versed in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures and processes.
Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes.
Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control), and determines the possible ramifications on the system’s current or future authorization. Required to brief senior management on the progress or results of an information system undergoing the authorization process.

Supported Technologies:

Required Skills and Qualifications:

Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience
DOD Secret Clearance.
Must be eligible for IT-II
Relevant certification meeting DOD 8570.01 IAM level III (for non-CERT personnel), or IAT level II (for CERT personnel).
Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
Computing Environment: AC & PHY SEC, CompTIA Security +, CE, CISSP, MCDST, MCITP EDST, MCITP EDA, MCITP SA, MCITP EA, MCM, MCA: MS Windows Server: Directory, Windows 10, MCSA, MCSE