Title: Information Security Analyst 

Clearance: DoD Secret, wtih TS eligibility

Location: Columbus, OH (Onsite)

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise – across the organization and around the world.

Foxhole Technology is seeking a experienced is seeking a highly motivated Information Assurance and Security Analyst with strong collaboration and communication skills to support our newly awarded contract. This position plays a critical role in supporting all facets of information assurance, system security, and compliance across the enterprise. 

• Maintain and execute the Information Security Plan. 
• Categorize and assign security controls in Enterprise Mission Assurance Support Service (eMASS). 
• Create, update, and manage Assessment & Authorization (A&A) packages in eMASS. 
• Coordinate and track inherited security controls within eMASS. 
• Manage and update entries in the DoD Information Technology Portfolio Repository (DITPR). 
• Oversee Ports, Protocols, and Services Management (PPSM). 
• Support processes for achieving and maintaining Authority to Operate (ATO) and Interim Authority to Test (IATT). 
• Prepare and submit reports in support of the Federal Information Security Management Act (FISMA). 
• Ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Alerts (IAVAs). 
• Respond to and manage cybersecurity incidents in coordination with the Cybersecurity Service Provider (CSSP). 
• Conduct vulnerability scanning and compliance reviews using Assured Compliance Assessment Solution (ACAS). 
• Oversee compliance activities related to Continuous Monitoring (ConMon) and Risk Management Framework (RMF) scoring. 
• Develop and maintain system profiles, security plans, and artifacts within eMASS

• Active Secret clearance with ability to obtain a Top Secret clearance. 
• DoD 8570 IAT Level II certification (e.g., Security+ CE) or above– required. 
• Minimum of 3+ years of experience in Information Security RMF – required. 
• Experience with DoD RMF, DIACAP, or NIST RMF. 
• Background in system accreditation, security assessments, and security engineering within the System Development Life Cycle (SDLC). 
• Hands-on experience with Host-Based Security System (HBSS). 
• Strong understanding of DoD, IC, and national-level system security practices across LAN/WAN, Cross Domain Solutions (CDS), and Cloud technologies. 
• Familiarity with security tools and frameworks such as ACAS, HBSS, Nessus, Splunk, etc. 
• Knowledge of Computer Network Defense (CND) procedures and technologies. 
• Understanding of boundary protection, enclaving, and encryption techniques/tools. 
• Demonstrated ability to develop security artifacts (e.g., Security Plans, POA&Ms, CONOPS). 
• Experience supporting RMF or FedRAMP accreditation efforts. 
• Working knowledge of ITIL processes is a plus. 

Requirements of position:  Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions.  Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others.  Must be able to see, have eye/hand coordination, and lift up to 10 lbs.  May be exposed to dust/dirt, humidity, and noise.

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.