Cyber Security Technology Management Analyst

The Cyber Security Technology Management Analyst will perform audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist and are correctly implemented; and that procedures comply with Federal, DOD, and DLA standards.

Duties and Responsibilities:

• Monitors Energy Applications for Industrial Control Systems (ICS), computer-controlled electromechanical systems that deliver installation infrastructure services including Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), Energy Management Control System (EMCS), others, as applicable to specific programs.
• Assesses compliance with IA policy and recommends improvements as appropriate
• Monitors Information Assurance (IA) for Energy Applications to ensure compliance with Federal, DOD and DLA IA policy. Monitors certification and accreditation activities.
• Recommends preparation updating of documentation to support Federal Information Security Management Act (FISMA) and DOD Risk Management Framework (RMF) reporting requirements.
• Ability to Develop RMF security documentation on behalf of OT applications
• Performs technical reviews of documented security certification results
• Assesses their comprehensiveness
• Identifies system vulnerabilities and weaknesses
• Recommends human procedures, software configuration parameters, system changes, or combinations of them to mitigate the risk associated with detected vulnerabilities that could preclude accreditations.
• Analyzes vulnerability scans and Security Readiness Review (SRR) results, Security Technical Implementation Guide (STIG) compliance and deficiencies of all forms identified during internal and external IA reviews.
• Tracks deficiencies and vulnerabilities from identification through implementation of adequate mitigation measures.