Imagine One Technology & Management, Ltd. is seeking a highly qualified Cybersecurity Analyst to support an effort within the Naval Information Warfare Center (NIWC) Atlantic in North Charleston, South Carolina. The ideal candidate will have demonstrated experience supporting Navy and/or United States Marine Corps (USMC) Programs of Record (PoRs), Risk Management Framework (RMF), and Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance (C4ISR) programs. The successful candidate will leverage cybersecurity expertise to protect and enhance the security posture of various DoD systems. We invite you to apply for this job opportunity and consider a role on our team.
Key Responsibilities:
Provide project support to include but not limited to executing cybersecurity assessments in compliance with RMF guidelines, ensuring Navy/USMC systems meet DoD standards, supporting and maintaining Interim of Authorizations to Test (IATTs) / Authorities to Operate (ATOs), and conducting vulnerability assessments using Enterprise Mission Assurance Support System (eMASS), Assured Compliance Assessment Solution (ACAS), Grype, Syft, and Security Content Automation Protocol (SCAP) tools. Conduct NIST-based risk assessments on non-compliant findings using the CVSS framework and USMC procedures. Perform continuous monitoring of security controls and reporting and tracking vulnerabilities. Administer, operate, and assess systems using ACAS/Tenable.SC, SCAP, Security Technical Implementation Guides (STIGs), and Security Requirement Guides (SRGs). Administer Linux and Windows-based systems (e.g., Red Hat Enterprise Linux, Windows 11) in a command line environment.
Qualifying candidates must meet or exceed the following requirements:
Experience Requirements:
- Minimum of three (3) years supporting a cybersecurity authorization framework similar to RMF
- Minimum of three (3) years of technical experience supporting C4ISR engineering, software development and integration programs, or similar USMC / Navy efforts, to include:
- Administering, operating, or assessing information systems
- Familiarity with administering, operating, and/or assessing MCCAST, ACAS / Tenable.SC, SCAP, eMASS, STIGs, and SRGs
- Developing cybersecurity authorization artifacts by reviewing engineering artifacts and documentation, and interviewing engineering stakeholders
- Planning, overseeing, and executing security control assessments to include policy reviews, architecture reviews, vulnerability scanning, evidence gathering and configuration audits
- Additional / concurrent experience to include:
- Administering, operating, and assessing Unix-based systems, such as Red Hat Enterprise Linux, in a command line environment - scripting, log analysis, and system administration from the terminal
- Proactively conducting research on emerging cybersecurity requirements and initiatives from NIST, the DoD, USMC and related organizations
- Ensuring key milestones for achieving and maintaining system/application authorizations are planned and executed
- Developing, overseeing, and executing continuous monitoring program for system(s) being operated by the integrated product team; to include laboratory system(s)
- Ability to maintain current knowledge of relevant technologies and subject areas, and research new and upcoming technologies
- Developing and documenting processes and completing tasks within an Agile / SAFe environment (iterations, not traditional waterfall phases)
Education Requirements:
- Bachelor of Science in Engineering, Physics, Network Security, Physical Sciences, Computer Science, Mathematics, or Psychology from an accredited college or university
- NOTE: Psychology is acceptable only if the degree includes courses in Human Systems Interface (HSI) and Human Factors Engineering (HFE)
- Cybersecurity Workforce compliant certification at the IAT/IAM Level 2 or higher (e.g., Security +, CISSP, etc.)
- Agile / SAFe certification(s)
- Working towards the following certifications within one and a half year after assuming duties: Professional Software Engineering Master (PSEM)/ Certified Software Development Professional (CSDP) or with COR approval complete a vendor/platform specific certification (e.g., Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Applications Developer (MCAD), Microsoft Certified Database Administrator (MCDBA), Sun Certified Professional (SCP), Red Hat Certification Program (RHCP), CISCO Certified Network Professional (CCNP), CISCO Certified Design Professional (CCDP), Oracle Certified Professional (OCP), etc.)
Additional Requirements:
- Experience in technical specifications development, process analysis and design, technical problem solving, and analytical/logical thinking
- Demonstrated experience translating complex technical findings into actionable guidance for engineers, program managers, and leadership
- Demonstrated experience writing clear, well-reasoned Plans of Action & Milestones (POA&Ms) and risk acceptance recommendations
- Proficient with Microsoft Office products (Word, Excel, PowerPoint, Outlook, Teams) and Adobe Acrobat
- Demonstrated experience utilizing JIRA, Confluence, Intelink, Fusion, SharePoint, or similar products
- High-level attention to detail and the ability to track various projects, tasks, schedules, and competing priorities
- Proven ability to collaborate and work effectively in a team environment
- Strong oral and written communication skills
- Process-oriented with organizational discipline and strong time management skills
Security Requirements:
- U.S. Citizen
- Active SECRET clearance
Additional Information:
- This is a hybrid position.
Imagine One offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing an advanced degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!
ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2022
CMMI Development and Services - Maturity Level 3
CMMC Level 2 (C3PAO)
An Employee-Owned Business
EEO/vets/disabled
Skills Required
- At least three years supporting a cybersecurity authorization framework comparable to RMF
- At least three years of technical experience supporting C4ISR engineering, software development and integration, or comparable Navy/USMC programs
- Experience administering, operating, or assessing information systems
- Familiarity with MCCAST, ACAS/Tenable.SC, SCAP, eMASS, STIGs, and SRGs
- Experience developing cybersecurity authorization artifacts from engineering documentation and stakeholder interviews
- Experience planning and executing security control assessments, policy and architecture reviews, vulnerability scans, evidence gathering, and configuration audits
- Experience administering, operating, and assessing Unix-based systems such as Red Hat Enterprise Linux in a command-line environment
- Experience with scripting, log analysis, and terminal-based system administration
- Ability to research emerging cybersecurity requirements from NIST, DoD, USMC, and related organizations
- Experience planning and executing milestones for system or application authorizations
- Experience developing and documenting continuous monitoring programs
- Bachelor of Science in engineering, physics, network security, physical sciences, computer science, mathematics, or qualifying psychology
- IAT/IAM Level 2 or higher cybersecurity certification, such as Security+ or CISSP
- U.S. citizenship
- Active Secret security clearance
- Agile or SAFe certification
- Ability to obtain PSEM/CSDP or an approved vendor/platform certification within 18 months
- Experience in technical specifications, process analysis and design, technical problem solving, and analytical reasoning
- Experience translating technical findings into actionable guidance
- Experience writing POA&Ms and risk acceptance recommendations
- Proficiency with Microsoft Office and Adobe Acrobat
- Experience using JIRA, Confluence, Intelink, Fusion, SharePoint, or similar tools
- Strong communication, collaboration, organization, attention to detail, and time management skills
What We Do
Imagine One Technology & Management, Ltd. provides mission-critical support services to DoD and federal agency customers in the areas of program management, systems engineering, interactive training, information technology, logistics, test & evaluation, cyber engineering and International Programs Support. Our senior managers, with over 260 combined years of defense and industry experience, include US Navy officers, US Government senior executives and senior civilian professionals adept in delivering effective strategic planning and program execution advice to customers and industry partners. Imagine One is a rapidly growing employee-owned company.
