Senior Information Systems Analyst at MAG Aerospace

Lexington Park, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

03 Oct, 26

Salary

140000.0

Posted On

05 Jul, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Engineering, Risk Assessment, Security Operations, Vulnerability Management, NIST 800-171, NIST 800-53, Risk Management Framework, Incident Response, Security Policy Development, Technical Writing, Compliance Auditing, Cybersecurity Strategy, Network Security, Information Assurance, Accreditation Process, Security Controls Implementation

Industry

Defense and Space Manufacturing

Description

Position Summary MAG Aerospace is seeking to identify a Senior Information Security Analyst to support operations based out of Webster Outlying Field (WOLF), MD. This position provide security engineering and assessment work in accordance with established procedures and protocols while ensuring the demonstrable Confidentiality, Integrity and Availability (CIA) of information assets for authorized internal and external users by reviewing, validating, classifying, and responding to security events and cyber-attacks. *This position is contingent upon receipt of government funding and hiring authorization. At this time, a start date has not been determined. We are seeking to identify and engage highly qualified professionals for a talent pipeline. Applicants may be contacted as program funding and hiring approvals are finalized. Essential Duties and Responsibilities Essential Duties and Responsibilities include the following. Other duties may be assigned. The position will assist with meeting the requirements of all four domains (Security Oversight, IT Risk Assessment, Security Engineering, and Security Operations) and focus on depth upon the domain requirements of Security Operations and IT Risk Assessment. Works with assistance from senior staff to define security requirements, track security specific issues/concerns, provide security solutions, identify & communicate vulnerabilities being introduced into the environment, and identify exceptions to policy. Assists in the development of enterprise-wide designs as well as research, develops and recommends architectural policies and practices for current and future initiatives from definition phase through implementation with guidance from senior staff. Manages internal security initiatives, with assistance from senior staff, that require little assistance from other groups. This includes writing requirements, managing the procurement process, initial installation, and configuration, and overseeing the entire project lifecycle. Researches, evaluates, and stays current on emerging tools, techniques, and technologies Isolate, define, and analyze issues or conditions regarding the IT department Resolve critical problems in all the US based locations Establish criteria, formulate projects, assess program effectiveness, and investigate a variety of technical conditions, problems, or issues Perform research, conduct studies, and adapt computer technology to meet the MAG IT department program plans to ensure the enterprise is compliant with all applicable Federal DoD Cybersecurity requirements – Provide authoritative information security advice and guidance to the Director for the Information Technology Department Create policies, implement controls, and provide training as necessary to ensure adherence to all applicable Federal DoD cybersecurity standards, HIPAA, and other relevant technology requirements Perform risk assessment activities to include the mitigation for vulnerabilities at regular intervals Maintain a record of any security violations and applicable resolutions Knowledge of a variety of information technology and cybersecurity competencies related to automated support, including an understanding of sophisticated analytical concepts, principles, techniques, and practices Comprehensive knowledge and demonstrated experience in managing procedures, policies, and standards such as NIST 800-171, 800-53 Excellent communication skills, both oral and written, to initiate and respond to technical assistance requests and present information to other employees of the organization Ability to conduct studies and recommend a course of action on proposed projects or refinements; ability to lead development of overall plans, criteria, and programming for the purposes of implementing new cybersecurity policies Apply and provide significant security services in support of an agency’s operations through the implementation of a risk management framework, which may include establishing technical security controls, providing continuous monitoring, conducting cyclical vulnerability testing, overseeing security assessments and authorizations, and responding to network security incidents Must also be self-motivated, well organized, and detail oriented to be able to take initiative and exercise judgement to ensure the cybersecurity of the company is maintained with the exponential growth of the enterprise Develop and carry out information security plans and policies - Develop strategies to respond to and recover from a security breach Develop or implement open source/third-party tools to assist in detection, prevention, and analysis of security threats Enterprise Risk Management & Analysis Management of Globally Deployed Information Assets. Implementation & Monitoring of NIST SP 800-171 (or 800-53) Controls Requirements Minimum Requirements Experience: (10) years of required experience as a ISSM or Information Security Analyst. Of the minimum ten (10) years of required experience, at least five (5) years of the experience must be in all phases of IA and accreditation process for Top Secret networks. Additionally, at least five (5) years of experience maintaining systems accreditation documentation. Education / Certifications: MUST HAVE an Active Certified Information Systems Security Professional (CISSP) OR CompTIA Advanced Security Practitioner (CASP) Master’s Degree in a Technical, IT or Computer Science Discipline Clearance: Must currently have a Top Secret Security Clearance US Citizenship required Special Note The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements. Benefits and Compensation At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $100,000 to $140,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.

Responsibilities

The role involves providing security engineering and assessment to ensure the confidentiality, integrity, and availability of information assets. Key duties include managing security operations, conducting risk assessments, and ensuring compliance with Federal DoD cybersecurity requirements.