Information Security Analyst with Security Clearance

Conducts cyber security compliance assessments of US Air Force Civil Engineering control systems. Assist site in the conducting field surveys, installs and operational support. Implements and evaluates Risk Management Framework Security Controls. Performs all procedures necessary or related to issuance of Authority to Operate (ATO) in the Risk Management Framework (RMF) process for control systems. Associated tasks include, but not limited to, assisting stakeholders in:

• Creating, gathering, and/or analyzing all necessary artifacts and documents required for obtaining an ATO on control systems

• Developing system categorization to ensure proper controls are selected and systems protected

• Creation of network topology diagrams to meet identified standards

• Working with local base personnel to understand and document hardware and software lists

• Development of Plans of Action and Milestones (POA&Ms) on control systems

• Assisting and educating on-site representatives (OSRs) and stakeholders with creation of RMF packages

• Assist sites in the performance of periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, and file system

• Preparing incident reports of analysis methodology and results

• Creating and entering all required documentation and artifacts into eMASS for ATO processing

• Participates in special projects and other duties as assigned