Information System Security Officer

MANTECH; Stafford (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

MANTECH in Stafford, VA seeks an Information System Security Officer to support Marine Corps Systems Command on a DoD contract. The role emphasizes security compliance, RMF authorization, and maintaining system security posture.

You will develop RMF artifacts, perform vulnerability analyses, and translate cybersecurity requirements into practical configurations while ensuring compliance with DoD directives.

Qualifications

• Bachelor’s Degree and at least 5 years of ISSO experience.
• DoD 8140 intermediate level certification (CASP, Security+, CISSP, or CISM).
• Experience with RMF, NIST guidelines and federal guidance.
• Familiarity with ACAS, SCAP, HBSS, MCCAST, eMASS, eArcher tools.
• Security Testing and Evaluation experience.
• Active Top Secret / SCI clearance.

Responsibilities

• Provide cybersecurity information assurance support for Marine Corps programs.
• Support RMF security authorization packages based on current doctrine.
• Develop and maintain System Security Plans, POA&Ms, and related docs.
• Perform vulnerability/risk analyses across the SDLC and address findings.
• Translate cybersecurity requirements into technical configurations and procedures.

Skills

RMF

NIST guidelines

ACAS/SCAP usage

HBSS

eMASS/eArcher

Vulnerability analysis

Education

Bachelor's Degree

Tools

ACAS

SCAP

HBSS

MCCAST

eMASS

eArcher

Job description

MANTECH seeks a motivated, career and customer-oriented Information System Security Officer to support our contract under Marine Corps Systems Command (MCSC) out of Stafford, VA.

The successful candidate will support the security compliance, and ongoing authorization of United Stated Marine Corps Systems.

Responsibilities Include But Are Not Limited To

• Provide cybersecurity information assurance support for Marine Corps information, intelligence, and cybersecurity programs.
• Support and assist in the development of Risk Management Framework (RMF) security authorization packages based on current doctrine.
• Assist government programs with generating and maintaining security documentation such as System Security Plans , Backup and Recovery Plans, Contingency Plans, and System Security Plan of Action and Milestones (POA&Ms) to ensure compliance with government security policies and procedures.
• Perform vulnerability/risk analyses of assigned information systems during all phases of the System Development Life Cycle; analyze vulnerability scan results / DISA STIGs, and generate and maintain system security POA&Ms.
• Interpret cybersecurity requirements into technical solutions and analyze system configurations to determine, maintain, and improve security posture.
• Recommend proper system configuration and administration control procedures to enhance system security, performance, and to ensure assigned Marine Corps information systems are compliant with applicable laws and policies and meet cybersecurity requirements outlined in the Defense Acquisition System guidance as well as all applicable Department of Defense (DoD), Department of the Navy (DoN), and Marine Corps cybersecurity directives and instructions.
• Provide cybersecurity support for information systems to address policymaking, programmatic and technical assistance, and all aspects of planning, documentation, engineering, and operating in secure environments.

Minimum Qualifications

• Bachelor’s Degree and at least 5 years of related ISSO experience (additional 2 years of experience may be substituted in lieu of degree.
• Must be compliant and certified at the DoW 8140 intermediate level, thus will need a CASP, Security+, CISSP, or CISM certification.
• Experience working with RMF, NIST, and other federal guidelines.
• Experience utilizing assessment tools (e.g., ACAS, SCAP, HBSS) and RMF process tools (e.g., MCCAST, eMASS, eArcher, etc.).
• Security Testing and Evaluation Experience.
• Experience with Assured Compliance Assessment Solution (ACAS), STIGs, and SCC.

Preferred Qualifications

• Marine Corps ISSO experience
• DoD Information Technology Portfolio Repository, Department of the Navy experience preferred.
• Knowledge of information security systems and applications for DoD projects (Marine Corps programs preferred).
• Knowledge of DoDI 8510.01; NIST 800 series publications; Intelligence Community Directive (ICD) 503; DoD Intelligence Information System (DoDIIS)-Joint Security Implementation Guide (DJSIG); Intelligence Community Information Technology Systems Security Risk Management; emerging cybersecurity policies; and all other policies, orders, and directives pertaining to the role.

Clearance Requirements

• Must have a current / active Top Secret / SCI clearance.

Physical Requirements

• Sedentary work.