Information Assurance/Security Analyst

This position is located in our VA, Dahlgren facilityMust have a DOD TS/SCI Clearance. The IA (Information Assurance) Analyst will support security initiatives related to the Mission Processing System (MPS) and its operating system. Personnel performing IA functions that establish IA policies and implement security measures and procedures for the Department of Defense and affiliated IS and networks must be IA certified, and that the certification be sustainable IAW Air Force Information Assurance Certification Implementation Plan In Accordance with DoD 8570.01-M.Research each AIX security related advisory and ensuing patch. Evaluate the need to apply to the MPS and provide rationale for applying/not applying patch to the Information Assurance officer (IAO) and Quality Assurance Provider (QAP). The results are then presented at the weekly Mission System Configuration Working Group (MSCWG) meeting; any security related advisories are discussed and evaluated for implementation. If the vulnerability is an Information Assurance Availability Alert (IAVA) or a Time Compliance Network Order (TCNO) the due date for implementation is 30 days.Support, test and provide application of those security patches deemed necessary or as mandated by higher authority.Upgrade Internet Security Systems' Internet Scanner and System Security Scanner on AIX systems.Execute the ISS Scans initially on MPS AIX hosts and provide report from each scan to the QAP and IAO. The ISS scans are executed on a weekly basis during scheduled system mainteneance times. Liaison with Government security specialists to resolve security risks identified during the MPS auditing program.Monitor the AIX auditing program by reviewing application, security and system logs on a weekly basis to ensure system integrity. This is a requirement set by the System Security Authorization Agreement (SSAA) for system certification. Uphold the Air Force guidelines set forth by HQ AFSPC/A6I ensuring the process leading to and maintaining an "Authority to Operate" granted by the Designated Approving Authority.BS/BA degree preferred and/or equalivent years of work experience. Requires 5-8 years experience.24 hours per week. Pro-rated benefits. MUST have a DOD TS/SCI clearance. ORGANIZATION BEING SUPPORTED: 20th Space Control Squadron (SPCS), Detachment 1 5280 Fourth Street, Bld 1700 Dahlgren, VA 22448-5300 MISSION: Provide non-personal technical services that provide project planning, management, development and evaluation of data. Work will be in support of the detachments Alternate Space Control Center (ASCC) and Air Force Space Surveillance System (AFSSS) missions for Mission Processing System security initiatives.1.2. OVERVIEW OF SERVICES REQUIRED: 1.2.1. The Contractor shall support security initiatives related to the Mission Processing System (MPS) and its operating system. Personnel performing IA functions that establish IA policies and implement security measures and procedures for the Department of Defense and affiliated IS and networks must be IA certified, and that the certification be sustainable IAW Air Force Information Assurance Certification Implementation Plan In Accordance with DoD 8570.01-M. 1.3. SPECIFIC REQUIREMENTS: The contractor shall provide services in accordance with the requirements of the below Performance Work Statement(PWS). Primary focus of all tasks will be security for the MPS operating system.1.3.1. REQUIREMENT 1: Security. 1.3.1.1 The contractor shall: 1.3.1.1.1 Research each AIX security related advisory and ensuing patch. Evaluate the need to apply to the MPS and provide rationale for applying/not applying patch to the Information Assurance officer (IAO) and Quality Assurance Provider (QAP). The results are then presented at the weekly Mission System Configuration Working Group (MSCWG) meeting; any security related advisories are discussed and evaluated for implementation. If the vulnerability is an Information Assurance Availability Alert (IAVA) or a Time Compliance Network Order (TCNO) the due date for implementation is 30 days. 1.3.1.1.2 Support, test and provide application of those security patches deemed necessary or as mandated by higher authority. 1.3.1.1.3 Upgrade Internet Security Systems' Internet Scanner and System Security Scanner on AIX systems. 1.3.1.1.4 Execute the ISS Scans initially on MPS AIX hosts and provide report from each scan to the QAP and IAO. The ISS scans are executed on a weekly basis during scheduled system mainteneance times. 1.3.1.1.5 Liaison with Government security specialists to resolve security risks identified during the MPS auditing program. 1.3.1.1.6 Monitor the AIX auditing program by reviewing application, security and system logs on a weekly basis to ensure system integrity. This is a requirement set by the System Security Authorization Agreement (SSAA) for system certification. 1.3.1.1.7 The contractor shall uphold the Air Force guidelines set forth by HQ AFSPC/A6I ensuring the process leading to and maintaining an "Authority to Operate" granted by the Designated Approving Authority.1.3.2. ADDITIONAL DELIVERABLES: The Monthly Status Report shall be provided to the QAP on the 10th day of each month. The Monthly Status Report shall contain a narrative description of the work accomplished during the previous month, including a listing of items purchased using Government funds and identify any significant accomplishments and/or problems. In addition, the Monthly Status Report shall list the cumulative hours expended and associated costs by labor categories, and funding remaining on the Delivery Order. Meeting agendas and minutes shall be submitted within 5 working days of meeting. Trip reports shall be submitted to QAP within 5 working days of trip.1.4. DELIVERABLES. 1.4.1. REVIEW: The QAP will review all deliverables for accuracy, completeness, and suitability and submit required changes to the contractor. The contractor shall have five (5) working days to correct and resubmit the deliverable. 2.0. SERVICE DELIVERY SUMMARY: Performance Objective SOW Para Performance Threshold Upon notification of an AIX patch. 1.3.1.1.1 100% resolution of MSCWG determined patches will be implemented with 30 days of notification. 3.0. GOVERNMENT-FURNISHED PROPERTY AND SERVICES: 3.1. GOVERNMENT-FURNISHED PROPERTY (GFP):3.1.1. HARDWARE: Computer equipment as required, comparable with what the government provides its own personnel of comparable expertise, experience, ability, position or status, who are performing similar work. To include MPS workstations and NMCI intranet equipment access and availability shall be provided at the Government facility for Tasks 1.3.1.3.1.2. SOFTWARE: Development software and supported materials as necessary to accomplish programming tasks.3.2. GOVERNMENT-FURNISHED RESOURCES: 3.2.1. FACILITIES, SUPPLIES, AND SERVICES: The contractor may be required to host and provide support for Government meetings related to the contract at the government's facility. Support consists of a conference room capable of handling 10-12 personnel and Overhead/Computer-driven projection capabilities. All meetings and the support to be provided shall be coordinated between the Contractor's Program Manager and the User Project Manager and will be provided at no additional cost. (Estimated one meeting per quarter, 4 meetings per year) 3.2.2. GOVERNMENT-FURNISHED INFORMATION: 3.2.2.1. The government will provide the following information: Instructions, manuals, texts, briefs, and other materials associated with the GFE Hardware/Software. Space Surveillance Network Security Classification Guide dtd 1 May 1991 SPADOC 4C Security Classification Guide dtd 15 January 1995 Air Force Information Assurance Certification Implementation Plan In Accordance with DoD 8570.01-M 3.2.2.2. All materials will remain the property of the Government and will be returned to the Government upon request or at the end of the Delivery Order period of performance. 4.0. PLACE OF PERFORMANCE: Work will be performed at the 20th SPCS, Det 1 facility (90%) with periodic (10%) work performed at the contractor's facilities. 4.1. TRAINING: Any additional training required by the Government shall be identified by the QAP and funded by the Government, on a case-by-case basis. The Government shall not be responsible for retraining costs associated with contractor employee turnover. Personnel performing IA functions that establish IA policies and implement security measures and procedures for the Department of Defense and affiliated IS and networks must be IA certified, and that certification be sustainable IAW Air Force Information Assurance Certification Implementation Plan In Accordance with DoD 8570.01-M. Submit Your Resume Online Now