Cyber GRC Analyst

Engility Corporation North Charleston , SC 29418

Posted 3 weeks ago


SAIC is looking for a Cyber GRC Analyst in Charleston, SC.

This individual will be responsible for supporting vendor and assigned ISSM efforts to develop RMF packages and providing relevant cybersecurity expertise. They will help take a Defense Health Agency (DHA) package through a full accreditation assessment and achieve an ATO.

Responsibilities include:

  • Support and coordinate workflow, activity, and documentation necessary to achieve successful RMF Assessment & Authorization (A&A) efforts for various DoD environments. This includes:

  • Coordination among myriad stakeholders, e.g., Security Engineers, Network Administrators, System Administrators, Information Assurance Managers (IAMs) / Information Systems Security Managers (ISSMs), certification authorities (and representatives), accreditation authorities (and representatives), program managers, vendors, etc., necessary to properly identify, document, mitigate, and manage risk attributed to the target system, network, and/or application;

  • Identify, develop (either directly, or in coordination with applicable experts), and incorporate common artifacts found in a RMF accreditation package, e.g., system architecture and boundaries, hardware and software inventories, risk assessment reports, POA&Ms, data flows, PPSM accounting, and other necessary system, network, and application documentation;

  • Knowledge and experience identifying, assessing, and documenting compliance against applicable DoD IA security controls (technical, management, operational), Service (e.g., Army) regulations, etc., within the RMF package;

  • Familiarity with the use of vulnerability scanning and assessment tools (e.g., ACAS/Nessus) necessary to identify and document compliance;

  • Knowledge of and ability to use applicable compliance reporting tools (e.g., eMASS, CMRS, COAMS, Tanium, Phoenix) to document the progress to A&A.

  • BS and 3 years or HS and 7 years.

  • 3 years of RMF experience

  • Capable of providing thought leadership to the ISSM in his/her efforts to maintain an organizational or system-level cybersecurity program, consistent with DoD appointment memorandum focal points (e.g., cybersecurity architecture, compliance requirements, objectives and policies, personnel, and processes and procedures).

  • Experience with Amazon Web Services is desired.

  • Ability to identify, interpret and evaluate major applications, infrastructure, enclaves, and Enterprise system environments based on proposed accreditation boundaries.

  • Ability to manage multiple projects simultaneously.

  • Strong verbal and written communications and interpersonal skills.

  • Active Secret Clearance

  • Minimum of an IAT level II certification. IAT/IAM level III certification is preferred

icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Cyber Security Data Scientist


Posted 5 days ago

VIEW JOBS 1/12/2021 12:00:00 AM 2021-04-12T00:00 <p>The Cyber Security Data Scientist is driven by an interest in solving complex business and cybersecurity problems through data exploration and analysis. They are highly analytically minded and have a robust technical tool kit. They have substantial experience in analytics with a portfolio of successfully executed models. The Data Scientist will be responsible for executing all steps in the modeling process to produce high quality, reproducible results. They will work with cyber security analysts to support the development of processes and technologies to improve threat detection and response.</p> <p>This role is responsible for extracting, managing, and analyzing complex network and IT component data and applying AI/ML concepts to uncover opportunities for process improvement. The Cyber Security Data Scientist has strong experience using a variety of data mining/data analysis methods, using a variety of data tools, building and implementing models, using/creating algorithms and creating/running simulations. The Data Scientist must have a proven ability to drive results with their data-based insights.</p><p><strong>Requirements</strong></p><p><strong>Position Requirements and Duties</strong>:</p> <ul> <li>Develop algorithms and applications to apply mathematics to data, perform large scale experimentation and develop functionality.</li> <li>Develop processes/tools to monitor and analyze data model performance and accuracy.</li> <li>Build and advocate data-driven solutions that help analysts improve outcomes and processes.</li> <li>Design and build scalable production-ready analytics solutions using a wide array of techniques and methodologies in the field of statistical modeling, machine learning, and other AI technologies to meet the needs of given subscriber engagements.</li> <li>Proposes and evaluates innovative solutions for analyzing, clustering, associating, and classifying data.</li> <li>Investigates various methods of data analysis and collection to manipulate data into a desired format or to ensure accuracy of test results.</li> <li>Develop and execute A/B testing framework and derive test model quality.</li> <li>Strong problem solving skills with an emphasis on developing alternate solutions to existing problems.</li> <li>Partner with other DoD data science teams to share best practices and insights to support ongoing learning.</li> <li>Demonstrate a high degree of originality and creativity when developing solutions to improve existing operational processes utilizing methods such as statistical analysis, regression modeling and optimization.</li> <li>Extends analytics platform for connected devices and sensors.</li> <li>Research new projects for potential development. </li> <li>Resolves a variety of technical problems leading to advanced engineering studies designed to increase efficiency or reduce costs.</li> <li>Effective communication skills at multiple levels of the organization, including senior management, with ability to communicate complex concepts in easy to understand terminology.</li> <li>Experience with network modeling tools and network optimization techniques (long range planning is a plus).</li> <li>Processing, cleansing, and verifying the integrity of data used for analysis. </li> <li>Assesses domain needs/requirements and implements solutions.</li> </ul><p><strong>Desired Skills and Experience</strong>:</p><ul> <li>Solid understanding of programming and scripting languages (e.g., R, Python, Java, C++, C).</li> <li>Excellent communication skills both written and verbal.</li> <li>Excellent data presentation skills.</li> <li>Excellent analytical and problem solving skills.</li> <li>Experience using statistical computer languages (e.g. Python, R, etc.) to collect, manipulate, and extract insights from large complex data sets from multiple sources.</li> <li>Proficiency in data analysis and presentation tools.</li> <li>Proficient in Microsoft Office applications. </li> <li>Experience with distributed data, cloud computing tools, and big data technologies (e.g., Hadoop, Spark, RedShift, SageMaker, Map/Reduce, and Hive).</li> <li>Experience in statistical and data mining techniques such as GLM/Regression, Random Forest, Trees, text mining, Boosting, etc.</li> <li>Eager to learn and master new technologies and techniques</li> <li>Knowledge in implementing machine learning algorithms and models.</li> <li>Knowledge of current technological developments/trends in area of expertise.</li> <li>Knowledge of scientific approach and methodologies.</li> <li>Ability to design, organize, and coordinate scientific research projects independently and as part of different functional teams.</li> <li>Ability to present to a variety of audiences both technical and non-technical.</li> <li>Ability to work under pressure and meet close deadlines.</li> <li>In-depth understanding and working experience of Data Warehousing/Data modeling /Data Hub methodologies is required.</li> <li>Understanding of key IT/Cybersecurity concepts (Network Security, Security Operations &amp; Administration, Incident Response &amp; Recovery, Identity and Access Management, Vulnerability Management etc.</li> <li>Unclassified or Classified Government networks. </li> <li>Expertise with networks such as NIPR, SIPR, JWICS and/or NSANet.</li> <li>Cloud Security and loT a plus!</li> <li>Experience with Cloud Services in the Federal sector (Google Apps, Amazon Web Services, etc.).</li> <li>Familiarity with Artificial Intelligence (Al), Deep Neural Networks (DNN), and Machine Learning (ML) concepts.</li> <li>Proficiency in use of visualization and exploration tools.</li> </ul><p><strong>Education</strong>: </p> <ul> <li>Bachelor's Degree in Data Science or equivalent from an accredited university.</li> <li>Master's or PHD in Statistics, Mathematics, Computer Science or another quantitative field preferred but not required.</li> <li>5-7 years in Data Science or similar field.</li> <li>5-7 years of experience manipulating datasets and building statistical models.</li> </ul><p><strong>Certifications:</strong></p> <ul> <li>8570 IASAE Level II – ­CISSP certification.</li> <li>OS certification (MCSE or CCDP equivalent is preferred).</li> <li>DoD 8140 Category – CSSP Incident Responder.</li> <li>Alternatively possessing non-DoD industry cyber security certifications plus the requirement to obtain the 3 certifications identified above within 12 months of employment. </li> </ul><p><br></p><p><strong>Security Clearance</strong>: Must be able to obtain a TS security clearance</p><p><strong>Additional Information</strong>: Up to 10% travel may be required.</p><p><strong>Benefits</strong></p><p><strong>AAP/EEO Statement</strong></p><p>Core4ce is an Equal Opportunity Employer. Core4ce does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.</p><p>Core4ce provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Core4ce complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.</p><p>Core4ce expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Core4ce’s employees to perform their job duties may result in discipline up to and including discharge.</p> Core4ce.Com North Charleston SC

Cyber GRC Analyst

Engility Corporation