Information Security Analyst, Senior

Auria (Boecore LLC)10 months ago
Colorado Springs, CO, United States
On-site
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

Auria Space is seeking a Senior Information Security Analyst to join our team in Colorado Springs, CO to support the Data Transport Product Support Sustainment Logistics Maintenance (DSLM) contract. The DSLM effort provides sustaining, maintaining, and logistics support for the operational capability to transfer data to deliver highly reliable and secure telemetry, tracking, command, control, and communications – primarily supporting the Satellite Control Network (SCN). This position is on-site at a contractor facility in Colorado Springs, CO.

Compensation: $82,000 - $107,000 based on the candidate's qualifications.

Key Responsibilities

  • Design, test, and implement state-of-the-art secure operating systems, networks, and database products.
  • Lead risk assessments and provide recommendations for application design and cybersecurity initiatives including architectures, firewalls, electronic data traffic, and network access.
  • Provide guidance on encryption technology, penetration and vulnerability analysis, and conduct information technology security research.
  • Maintain multiple RMF packages and perform risk assessments across mission systems (e.g., SCN, SCN Test Lab, Orbital Analysis Subsystem).
  • Serve as a cybersecurity expert, leading and tasking Junior and Journeymen Information Security Analysts in effective RMF execution.
  • Develop and implement an Anti-virus/Malware identification process for SCN equipment check in/out.
  • Coordinate with the SWMA IA patching team and program office IA architecture team on an IA/Cybersecurity Roadmap, addressing non-compliant IA controls and proposing corrective actions.
  • Employ system security engineering to design, develop, and implement secure applications and configurations while evaluating hardware, firmware, and software security components.
  • Organize annual cybersecurity control validation within eMASS in accordance with DoDI 8510.01 and DoDI 8500.01.
  • Attend Technical Interchange Meetings at key project phases to ensure cybersecurity community buy-in.
  • Participate in the development and implementation of policies, procedures, and standards related to information security, privacy, and incident response.
  • Provide technical engineering services management for integrated security systems and solutions and use tools to monitor security-related events.
  • Assess cybersecurity configuration changes for major security infrastructure platforms and maintain a library of security audit tools for testing, internal audits, and incident response.
  • Travel up to 20% to CONUS and OCONUS locations as required.

Required Qualifications

  • BS Degree in a related field plus 5 years of related experience, or an equivalent combination of education and experience.
  • Active DoD Secret Security Clearance or the ability to obtain and maintain one.
  • Demonstrated technical competence with strong data analysis skills, solid decision making, critical thinking, and effective interpersonal abilities.
  • Strong customer focus, self-motivation, desire to learn, and a team-player attitude.

Preferred Qualifications

  • DoD 8140 Cyber Defense Analyst or Vulnerability Analyst Intermediate Qualification or relevant certification (e.g., CISSO, CySA+, GPEN, CISA) or a technical BS from an ABET accredited/CAE designated institution.
  • Experience with SCN and/or DoD operations.
  • Experience with cybersecurity tools (e.g., eMASS, ACAS, ESS, SIEM, STIGs) and flexibility to undertake unanticipated tasks.

Benefits & Perks

  • Generous PTO package with yearly tenure increases
  • Flex time for added scheduling flexibility
  • 11 Company-Paid Holidays & Float days per year
  • Up to 4% match on 401(k) contributions with immediate vesting
  • Up to $5,250 per year in Education and Training Assistance
  • Low-cost medical plans including company-sponsored HSA
  • No-cost life insurance
  • Employee Assistance Program (EAP) and much more

Required Skills

Security Architecture
RMF
Network Security
Penetration Testing
Cybersecurity
Encryption
Vulnerability Analysis
Incident Response
Risk Assessments