Cybersecurity Certification and Accreditation (C&A) Analyst

Requires Active Secret Clearance

Serves as a Cybersecurity Subject Matter Expert (SME) with regards to Authorization of information systems and all associated cybersecurity policies and procedures. Fully versed in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures and processes. Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. Required to brief senior management on the progress or results of an information system undergoing the authorization process.

Minimum Experience: DoD Approved 8570 Baseline Certification: Category IAM Level III Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience DOD Secret Clearance Must be eligible for IT II Relevant certification meeting DOD 8570.01 IAM level III o Experience in assessing security controls and conducting authorization reviews for large, complex organizations.

Task Areas: All

The primary place of performance will be at the contractor’s facility and/or Off-Site. Personnel shall be available to periodically support meetings and/or SIPRNET tasks at DLA locations as required. Secure View Residential Use will be reviewed and approved on a case-by-case basis. Alternate work locations other than onsite or the Contractor’s residence listed in the RCPA Authorization are not authorized.