Information Systems Security Analyst (ISSA)

Job Description

Job Description

Boarhog will be hiring an Information Systems Security Analyst (ISSA) in Dahlgren VA to support the Surface Combat Systems Training Command (SCSTC) which requires support in Network Administrative Support, including Information Management, Computer and Local Area Network (LAN) Administration, Cyber Security, System Assessment and Authorization (A&A), Functional Area Needs Analysis/Research, Technical Documentation, and Technical Helpdesk Support. SCSTC consists of the Command and Staff located in Dahlgren, Virginia, as well as SCSTC Units, Sites, and Detachments worldwide.

Travel may be required to locations such as Mayport FL, Pearly Harbor HI, Everett WA, Norfolk VA, Rota Spain, and Yokosuka Japan. The use of overtime is authorized when necessary to cope with emergencies, to perform tests, or conduct operations that are continuous in nature and cannot reasonably be interrupted or completed otherwise. The Boarhog headquarters is in Old Town San Diego with the Boarhog Program Manager for this contract operating out of the Boarhog office in the Richmond VA area.

REQUIRED SKILLS and KNOWLEDGE:

(1) Cybersecurity Expertise:

 Cybersecurity principles, threats, vulnerabilities, and risk management processes

 Encryption algorithms (e.g., Internet Protocol Security (IPSEC), Advanced Encryption Standard (AES), General Routing Encapsulation (GRE), Internet Key Exchange (IKE), Message Digest 5 (MD5), Secure Hash Algorithm (SHA),

Triple Data Encryption Algorithm (3DES))

 Data backup and recovery concepts and tools

 Disaster recovery and continuity of operations planning

 Host/network access control mechanisms (e.g., Access Control Lists (ACLs))

 Incident response and handling methodologies

 Intrusion detection methodologies and techniques

 Network traffic analysis methods

 Network protocols (Transmission Control Protocol /Internet Protocol (TCP/IP), and Open System Interconnection (OSI) model

 System and application security threats and vulnerabilities (e.g., buffer overflow, cross-site scripting, SQL injection)

 Security architecture concepts and enterprise architecture reference models

 National and international cybersecurity laws, regulations, policies, and ethics

 Current and emerging threats and threat vectors

 Enterprise incident response program, roles, and responsibilities

 Penetration testing principles, tools, and techniques

(2) Technical Proficiency:

 Computer networking concepts, protocols, and security methodologies

 System performance and availability monitoring

 System software and organizational design standards (e.g., International Organization of Standardization (ISO) guidelines)

 System life cycle management principles, including software security and usability

 System/server administration and systems engineering concepts and methods

 Server and client operating systems

 Network security architecture concepts (topology, protocols, defense-indepth)

 Network systems management principles and tools

 Basic system administration, network, and operating system hardening techniques

 Cloud computing service and deployment models (SaaS, IaaS, PaaS)

 Cloud security strategy and architecture

 Data security standards Personally Identifiable Information (PII), Payment Card Information (PCI), Protected Health Information (PHI))

(3) Leadership and Management:

 Information security program management and project management principles

 Resource management principles and techniques

 Risk management processes (assessment and mitigation)

 Secure acquisitions (e.g., Contracting duties, secure procurement, supply chain risk management)

 Information technology (IT) supply chain security and risk management

 Applicable laws, statutes, Presidential Directives, and guidelines related to cybersecurity and privacy

 Organizational risk tolerance and risk management approach

 Critical IT procurement requirements

EXPERIANCE :

Four (4) years experience

CERTIFICATION:

Information (IAT) Level II (e.g. CompTIA Security+)

CLEARANCE:

All Contractor personnel shall possess, at a minimum, at the time of Task Order award a current SECRET clearance

based on a Tier 3 (T3)/Tier 3 Reinvestigation (T3R) completed within the last 10 years.

OTHER HIRING CONSIDERATIONS:

Preference is given to candidates who reside in a Historically Underutilized Business Zone (HUBZone) as determined by the Small Business Administration (see SBA website)

BOARHOG BENEFITS:

Boarhog has over 13 years of Maritime Industrial Base (MIB) steady, controlled growth and profitability, offering our full-time associates a remarkable compensation package, including:

• Competitive salary and opportunities for additional compensation.
• Greater Self-Determination
• Medical / Dental / Vision Health Benefits.
• Generous 401K retirement plan after six months of full-time employment, with pre-tax/post-tax options and company matching with immediate vesting to boost retirement savings
• Vacation.
• Health savings account.
• Stipend for residing in a HUBZone location
• Relocation and earned a performance bonus.

We thrive in a welcoming culture within a completely flat organization, with a demonstrated vested interest in our associates' personal and professional goals and aspirations, taking pride in the resulting exceedingly low associate turnover rate. As a successful and respected SBA Certified Service Disabled Veteran Owned (SDVO) and Historically Underutilized Business Zone (HUBZone) small business, there is no fat on the Boarhog, promoting a great degree of self-determination... nobody with Boarhog has ever and will never make a living watching other associates do work. The company Chief Executive Managing Member and Owner actively engages in the day-to-day operations and growth objectives, and also periodically performs direct on government and commercial contracts. Pigs in the breakfast... skin-in-the-game, and the story behind our logo. Come join us!

E04JI800rmcl408bvdz