Cybersecurity Analyst (SME)

Description Cybersecurity Analyst (SME) About CICONIX: CICONIX LLC is a Veteran Owned Small Business specializing in business advisory and technical assistance for military health programs. We value exceptional people, unwavering integrity, inclusive collaboration, and enduring impact.   . Location(s): Orlando, FL (on-site) . Position Details: Full-time position Regular weekly hours (0700-1600)  No calls, nights, weekends, or holidays! Full benefit program, including: health, PTO, & 401k + contribution . Requirements: Active Secret Clearance Required Bachelor's degree preferred DHA Medical Simulation and Training experience preferred A minimum of IAT Level II certification IAW DODM 8570.01. Summary: CICONIX is seeking a Cybersecurity Analyst (SME) to support the Defense Health Agency (DHA) Medical Simulation and Training Program Management Office (MST PMO) in Orlando, FL. . About the Role: Support the efforts to coordinate the Certification and Accreditation (C&A) of systems in accordance with the Risk Management Framework outlined by the National Institute of Standards and Technology (NIST), DoD Instruction 8500.1. This includes supporting the development, coordination and support of initial C&A, Federal Information Security Management Act (FISMA) and re-accreditation requirements. Support the efforts to coordinate and ensure Assess and Authorization (A&A) of systems are IAW DoD Cybersecurity (CS) A&A Risk Management Framework (RMF) process and/or Intelligence Community Directives (ICD) 503/Director of Central Intelligence Directive (DCID) 6/3 guidance, DoDI 8500.01, DoDI 8510.01 and AR 25-2. This includes supporting development, coordination and support of initial A&A, Federal Information Security Modernization Act (FISMA) and re-authorization requirements. Provide Information Security (IS) engineering support to integrate required security characteristics and requirements into the performance objectives of the selected system. Support system security certifications to ensure that subject systems meet all applicable security regulations and standards and are able to complete successful certification test and evaluation events. In addition, the Contractor shall provide assistance to ensure that these systems are protected from known vulnerabilities. Support the preparation and generate required security A&A documentation and coordination with the Authorizing Official (AO) to obtain successful system accreditation. Security documentation includes, but is not limited to, artifacts required by RMF and National Institute of Standards & Technology (NIST) controls such as the Security Plan (SP), Continuity of Operations Plan (COOP), Configuration Management Plan (CMP) and when required a Plan of Action and Milestones (POA&M). Support the preparation and generate required security A&A documentation and coordination with the Authorizing Official (AO) to obtain successful system accreditation.…