Information System Security Officer

Southeastern-Comp-Consultants-Inc; Dahlgren (VA); Presencial; USD 120 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Dental

Vision

Life Insurance

Disability

401k with Company Match

2 weeks vacation

48 hours sick/personal leave

11 paid Holidays

Resumo da oferta

Southeastern-Comp-Consultants-Inc (SCCI) is seeking an Information System Security Officer (ISSO) to support RMF/A&A for a DoD weapon systems portfolio in Dahlgren, VA. The role emphasizes A&A verification, security plan development, and STIGs compliance.

The ideal candidate will hold a Bachelor’s in CS/IT/CE, a Secret clearance, 5+ years in IT management, and DoD RMF experience. Strong communication and team collaboration are essential for this fast-paced environment.

Qualificações

• U.S. citizen with active Secret clearance and IAM 2 certs.
• Bachelor’s degree in CS/IT/CE or related field.
• 5+ years IT management and RMF experience with DoD.
• Experience with RMF/A&A processes and security controls.

Responsabilidades

• Provide A&A support for RMF verification and accreditation.
• Validate controls and maintain RMF documentation.
• Assist in developing security plans and diagrams.
• Manage ATO/IATT packages through eMASS.
• Oversee IAVM planning and reporting.
• Review STIGs and vulnerability scans (Nessus/ACAS).
• Participate in CCB meetings and risk assessments.

Conhecimentos

US Citizenship

Secret Clearance

RMF/A&A

STIGs

eMASS

ACAS/Nessus

IAM Level 2

Security Controls

Team Collaboration

Communication

Formação académica

Bachelor's in CS/IT/CE

Ferramentas

Tenable SC

Nessus

ACAS

eMASS

Descrição da oferta de emprego

OverviewSCCI is currently seeking an Information System Security Officer (ISSO) to support Cybersecurity requirements and tasking for a portfolio of DoD Weapon System 'tactical' projects. The program's mission planning and fire control systems provide safe and effective employment of precision guided munitions and gunfire from aircraft platforms, as well as precision guided munitions from surface and unmanned platforms. The successful Candidate must possess experience and knowledge in Assessment and Authorization (A&A) processes and procedures with the Risk Management Framework (RMF). In this role you will also work as part of a team to implement security controls and policies across the portfolio of projects. Familiarity with DISA Security Technical Implementation Guides (STIGs), certification and accreditation, and the administration and troubleshooting of tactical and non-tactical networks is required. This position is located in Dahlgren, VA.SCCI offers a comprehensive and competitive benefits package including Health, Dental, Vision, Life and Disability benefits, 401k with Company Match, time off consisting of 2 weeks of paid vacation, 48 hours of sick/personal leave, and 11 paid Holidays.Responsibilities:Provide dedicated Assessment and Authorization (A&A) support services as defined in the RMF for verification, validation, and post accreditationPerform validation assessments of implemented controls and maintain required documentation per RMF guidelinesAssist in developing, maintaining or reviewing accreditation and authorization documentation such as the security plan, security assessment plan, and hardware and software diagramsAssist in developing, maintaining or reviewing business plans and procedures such as IT strategic plan, contingency plan, incident response plan, and standard operating proceduresManage and document the ATO/IATT package process through Enterprise Mission Assurance Support Service (eMASS)Oversee the Information Assurance Vulnerability Management (IAVM) plan ensuring timely compliance and reporting. Collaborate with system administrators to conduct risk assessments, determine mitigation plans and creation of Plans of Action and Milestones (POA&M)Conduct the review and verification of Security Technical Implementation Guides (STIGs)Review and analyze Tenable Security Center and Nessus Assured Compliance Assessment Solution (ACAS) vulnerability scansContribute and participate in various meetings including the Configuration Control Board (CCB)Perform problem resolution and adapt to changing technologies, processes, and organizational requirementsEssential Skills and Experience:Must be a U.S. Citizen and be able to obtain and maintain an active Secret Security ClearanceBachelor's (BS) Degree in Computer Science, Information Technology, Computer Engineering or related degreeMinimum of five (5) years of experience in the field of IT ManagementMust be IAM level 2 certifiable per DoD 8140 (CISSP, CISM, GSLC, CASP, or CAPMust be able to use, interpret and implement security controls in a manner that supports the warfighting capabilitiesMust possess experience and knowledge of DoD RMF processesExperience developing RMF accreditation packages is required with US Military RMF experience preferredExperience working with eMASSExperience performing or assisting the duties and responsibilities of an ISSO is preferredAbility to work in a fast paced, rapidly changing tactical environmentAbility to work independently and interface professionally with other government agencies, contractors, and military personnelAbility to work with others to meet established goals and program schedulesAbility to communicate effectively, both verbally and in writingStrong analytical skills and ability to assist other team members in problem solvingStrong team player, able to work in a fast-paced, rapidly changing environmentSCCI is committed to providing a comprehensive and competitive benefits package to meet the needs of employees and their families. EOE of Veterans and Disabilities.