It Specialist (infosec)

Naval Air Systems Command (NAVAIR) • Orange County, CA, US • 1w ago

Summary

You will serve as an IT Specialist (INFOSEC) in the Corporate Business & Analysis Group, DITAC, Advanced Programs Division, Cyber Weapons Branch of NAVAIRWARCENWPNDIV POINT MUGU.

Duties

You will perform as the lead technical authority (ISSM) for all facets of Cybersecurity at Point Mugu Sea Range, providing guidance and oversight on cybersecurity requirements and implementation in accordance with the JSIG and governing policy.
You will advise CISSM, CISSEs, and CISO of changes affecting the organization's cybersecurity posture.
You will be responsible for the development of Assessment and Authorization artifacts such Concept of Operation (CONOPS), System Security Plan, (SSPs), Security Controls Traceability Matrix (SCTM), System Profiles, testing documentation, and more.
You will review and evaluate the security impacts of new systems or system changes to include existing or proposed interfaces with other IT systems.
You will perform activities and prepare documentation at each step of the Risk Management Framework (RMF) in pursuit of or to maintain an Authorization to Operate (ATO).
You will perform and track Information System (IS) self-inspections, reports, system tests and responses.
You will analyze vulnerability scans, STIG compliance and deficiencies of all types identified during internal and external cyber security reviews.
You will ensure that deficiencies and vulnerabilities are included in a Plan of Action and Milestones and are tracked until the adequate mitigation measures have been implemented.
You will perform data integrity containments and investigations on Information Assurance (IA) related security violations / incidents.
You will manage and mentor assigned CSWF members.
You will conduct security education training for system users and peers on appropriate risk mitigation strategies and security practices on an initial and annual basis.