Cybersecurity Risk Management Analyst - SME
Antero Technology ServicesAnnapolis Junction, Maryland
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Schedule
Full-time
Career level
Senior-level
Remote
On-site
Benefits
Health Insurance
Paid Vacation
401k Matching/Retirement Savings
Job Description
Are you ready to grow as a Cybersecurity Risk Management Analyst? Antero Technology Services is looking for a proactive person with a TS/SCI clearance to join our Enterprise Infrastructure Engineering Team. You will work with the Information System Security Manager to maintain Authority to Operate approvals for various systems by adhering to the Risk Management Framework as stipulated by NISPOM/DAAPM, NIST 800-53, ICD 503, STIGs, and associated publications. You’ll be part of a team who reliably delivers the enterprise systems for tens of thousands of mission-critical customers on a global scale.
Your Place in Our Team
We’re a small business which means you make a big difference with our team. We offer full company-paid health plans, time off, retirement, and other financial benefits. Our culture thrives on learning, and our professional growth program helps pay for your advancement. We encourage leadership growth too, and we’ll help you build and lead a team of your own.What you’ll be doing
- Act as an appointed Information System Security Officer (ISSO) for IC cyber systems being developed by the Engineering Team
- Analyze security controls in accordance with IC, AO, or NIST-800-53, rev 5; author System Security Plans, System Security Test Plans, Authorization and Accreditation, and other system documentation
- Report, document, and brief the cybersecurity status of systems under development while assuring the successful and timely progression through the DoD Risk Management Framework to the satisfaction of the appointed Information System Security Manager, and/or senior government leadership
- Ensure the remediation of any findings assigned to engineering as documented in the Security Assessment Report and its Plan of Actions and Milestones
- Assess the impact that proposed changes might introduce to the environment, and provide updates to the ISSM regarding configuration management changes to the authorization boundaries
- Document and defend reasoning when waivers are sought, or non-standard remediation solutions are requested for specific security controls
- Conduct periodic reviews of information systems to ensure compliance with the security authorization package
What you’ll need to have
- TS/SCI with CI Poly, or willingness and ability to be cleared
- High School+12 years; Bachelor’s+10; Master’s+8
- Security+ or similar IAT Level II certification
- In depth understanding and application of NIST 800-53 security controls
- Experience with Xacta, vulnerability scanning (Nessus, SCAP, ACAS, SCC), and other RMF tools
- Experience with the procedures and preparation of Assessment and Authorization documents of various systems including Windows, Linux, network devices, and peripherals
- Experience with annual assessments and documenting compliance in an automated tracking system; experience developing POAMs with the Information Systems Security Manager to address non-compliance in the allotted timeframe
- Ability to articulate and document thoughts effectively
- Engaging communications style with customers, peers, and support teams
Strengths you’ll bring to our team
- Passion for learning and professional growth
- Eagerness to help customers, peers, and juniors
- Taking ownership to do the right things right
- Building trust by delivering results that make a difference
- Comfortable communicating good news, bad news, challenging opinions, and innovative ideas
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Cybersecurity Risk Management Analyst - SME Jobs at Antero Technology Services
What is the work location for this position at Antero Technology Services?
This job at Antero Technology Services is located in Annapolis Junction, Maryland, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at Antero Technology Services?
Employer has not shared pay details for this role.
What employment applies to this position at Antero Technology Services?
Antero Technology Services lists this role as a Full-time position.
What experience level is required for this role at Antero Technology Services?
Antero Technology Services is looking for a candidate with "Senior-level" experience level.
What benefits are offered by Antero Technology Services for this role?
Antero Technology Services offers following benefits: Health Insurance, Paid Vacation, 401k Matching/Retirement Savings, and Health & Wellness Programs for this position. Actual benefits may vary depending on the employer's policies and employment terms.
What is the process to apply for this position at Antero Technology Services?
You can apply for this role at Antero Technology Services either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.