NASA information Security Compliance Analyst

Job Description

DescriptionSAIC is looking for an Information Security Analyst I to support the Enterprise Applications Service Technologies (EAST2) program provides services necessary to operate NASA?s Application and Platform Services (APS) for Marshall Space Flight Center (MSFC) in Huntsville, AL. APS provides services to operate, maintain, and enhance key Business and Mission-Supporting platforms, applications and infrastructure used across the Agency. Our team is committed to fostering an environment for every teammate that?s welcoming, respectful and inclusive, with great opportunity for professional growth.Description:APS is revolutionizing software across NASA using DevSecOps principles of Agile, CI/CD, Automation, Containers, Cloud, Infrastructure as Code (IaC) and Automated Testing. Our teams use a fast-paced agile cadence to deliver products and services to programs across all business units at NASA.The Information Security Analyst (ISA) must possess strong written and oral communication skills to work with various business units, team members, and management. The candidate must possess the ability to work independently and within a larger group of cybersecurity professionals. The candidate will serve in a security and risk advisory role for cross functional teams and management. Must have working knowledge of NIST?s Risk Management Framework (RMF) and NIST 800-53 Security and Privacy controls. Perform assessments on cloud environments and application software to identify where there are any deviations from acceptable configurations, Federal regulations, or local policy. Establish control processes to ensure mitigation of risks and supports obtaining certification and accreditation of software. Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, software introduction and release, emerging technology research inspections and periodic audits. Support the formal Security Test and Evaluation (ST&E) required through pre-test preparations, participation in the tests and the analysis of the results. The candiate must possess the ability to provide informaiton security vulnerability and threat analysis services to internal NASA business owners. Maintain knowledge of security and privacy laws, directives, regulations, industry best practices, and changes in technology.Responsibilities:

• Support Application Security Plans (ASP) through all steps of RMF and ensure software and cyber security regulations and standards are met
• Manage the Plan of Actions and Milestones (POA&M) and Risk Based Decisions (RBD)
• Perform Risk Assessment (NIST 800-30)
• Maintain Privacy Threshold Analysis (PTA) and perform Privacy Impact Assessments (PIA)
• Communicate, collaborate & coordinate with cybersecurity team, contract, and NASA management
• Vulnerability Analysis and Asset Management
• Define and manage work within the SAFe Agile Framework

QualificationsRequiredEducation:

• Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience.
• Years of experience accepted in lieu of degree.

RequiredExperience/Certifications:

• Security+ (CompTIA)
• Experience with Agile, Scrum, SAFe or other modern software development methods/practices

DesiredCertifications (Any of the following):

• CISSP (ISC2)
• CISM (ISACA)
• CASP+ (CompTIA)
• SAFe DevOps

Desired Skills:

• Experience in technical writing a strong plus

Clearance:

• Must be a U.S. Citizen with an active Secret Clearance.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.OverviewSAIC? is a premier Fortune 500? technology integrator driving our nations technology transformation. Our robust portfolio of offerings across the defense, space, civilian, and intelligence markets includes secure high-end solutions in engineering, digital, artificial intelligence, and mission solutions. Using our expertise and understanding of existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions that are critical to achieving our customers missions.We are more than 26,500 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer, fostering a respectful work culture based on diversity, equity, and inclusion that values all contributors. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.1 billion. For more information, visit saic.com.

Keyskills :