Information Assurance (IA) Operations Analyst (1001)

SMX is seeking an Information Assurance (IA) Operations Analyst to provide information assurance to Department of Defense (DoD) networks and communication systems. The IA analyst will support UNIX/Linux operating systems through vulnerability detection, provision of resources, and maintenance of OS patches and releases for platform applications such as (but not limited to) Red Hat Enterprise Linux (RHEL) 7, Solaris 11, and Solaris 10. The analyst will conduct and assist with the performance of security risk assessments of systems and equipment using DISA security technical implementation guidance (STIG), perform monthly vulnerability assessments using automated system configurations tools, and assist with the completion of technical scans on technologies such as RHEL 7 and Solaris 11 database and application servers. The analyst will create technical documentation, network diagrams, inventory control documentation, security documentation, and RMF artifacts to support the accreditation process initiatives.

The IA analysts responsibilities will include:

• Monitor NHDSM ticketing system
• Vulnerability scanning and remediation
• Complete STIG Checklists using scripting and automation
• Attend collaboration meetings to address STIG/SCAP discrepancies
• Run required ACAS reports
• ACAS scanning

Required Skills and Experience:

• Clearance Required: DOD Secret
• Detail-oriented and able to work multiple assignments autonomously and in a team setting
• Proficient with clear and concise verbal and written communication
• Experience with UNIX/LINUX operating systems such as RHEL 7 and Solaris 11
• Knowledge of NIST guidelines
• RMF knowledge is desired
• Knowledge of DoD Information Assurance practices, including Security Technical Implementation Guide (STIG)
• Must be able to interact with peers, management, and senior engineers in a constantly evolving environment to ensure a positive customer experience and atmosphere in the workplace
• 1-3 years of UNIX/Linux System Administration experience
• Experience in DoD Information Assurance/Cyber policy and procedures to include hardening of systems, implementing Security Technical Implementation Guides (STIGs) and scanning
• DoD 8570 compliant (IAT Level 2) (Examples of minimum acceptable certifications: CCNA Security, CySA , G SEC, Security CE, SSCP)

Desired Qualifications:

• Experience with vulnerability assessment and remediation is desired
• Experience with ACAS Security Center is desired

Vaccination is a requirement of the position per Executive Order 14042. If a candidate is not vaccinated, they may request an accommodation once offered the position. The accommodation must be granted prior to the employee starting in the position. Candidate will have 60 days to get vaccinated.