Information System Security Officer

MANTECH; Stafford (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

MANTECH in Stafford, VA seeks an Information System Security Officer to support Marine Corps Systems Command. The role focuses on security compliance, RMF accreditation, and documentation such as SSPlans and POA&Ms to keep DoD programs compliant.

The candidate will perform vulnerability and risk analyses, interpret security requirements into technical solutions, and ensure systems meet DoD and DoN cybersecurity directives; Top Secret/SCI clearance required.

Qualifications

• Bachelor’s Degree and at least 5 years of related ISSO experience (additional 2 years of experience may be substituted in lieu of degree).
• Must be compliant and certified at the DoW 8140 intermediate level, thus will need a CASP, Security+, CISSP, or CISM certification.
• Experience with RMF, NIST, and other federal guidelines.

Responsibilities

• Provide cybersecurity information assurance support for Marine Corps information, intelligence, and cybersecurity programs.
• Support and assist in the development of RMF security authorization packages based on current doctrine.
• Assist government programs with generating and maintaining security documentation such as System Security Plans, Backup and Recovery Plans, Contingency Plans, and POA&Ms to ensure compliance with government security policies and procedures.
• Perform vulnerability/risk analyses of assigned information systems during all phases of the System Development Life Cycle; analyze vulnerability scan results / DISA STIGs, and generate and maintain system security POA&Ms.
• Interpret cybersecurity requirements into technical solutions and analyze system configurations to determine, maintain, and improve security posture.
• Recommend proper system configuration and administration control procedures to enhance system security, performance, and to ensure assigned Marine Corps information systems are compliant with applicable laws and policies.

Skills

Security Certs

Education

Bachelor's degree

Certifications: CASP/Security+/CISSP/CISM

Tools

RMF Tools (MCCAST/eMASS/eArcher)

Job description

MANTECH seeks a motivated, career and customer-orien ted Information System Security Officer to support our contract under Marine Corps Systems Command (MCSC) out of Stafford, VA.

The successful candidate will support the security compliance, and ongoing authorization of United Stated Marine Corps Systems.

Responsibiliti es include but are not limited to:

Provide cybersecurity information assurance support for Marine Corps information, intelligence, and cybersecurity programs.

Support and assist in the development of Risk Management Framework (RMF) security authorization packages based on current doctrine.

Assist government programs with generating and maintaining security documentation such as System Security Plans , Backup and Recovery Plans, Contingency Plans, and System Security Plan of Action and Milestones (POA&Ms) to ensure compliance with government security policies and procedures.

Perform vulnerability/risk analyses of assigned information systems during all phases of the System Development Life Cycle; analyze vulnerability scan results / DISA STIGs, and generate and maintain system security POA&Ms.

Interpret cybersecurity requirements into technical solutions and analyze system configurations to determine, maintain, and improve security posture.

Recommend proper system configuration and administration control procedures to enhance system security, performance, and to ensure assigned Marine Corps information systems are compliant with applicable laws and policies and meet cybersecurity requirements outlined in the Defense Acquisition System guidance as well as all applicable Department of Defense (DoD), Department of the Navy (DoN), and Marine Corps cybersecurity directives and instructions.

Provide cybersecurity support for information systems to address policymaking, programmatic and technical assistance, and all aspects of planning, documentation, engineering, and operating in secure environments.

Minimum Q ualifications:

Bachelor’s Degree and at least 5 years of related ISSO experience (additional 2 years of experience may be substituted in lieu of degree.

Must be compliant and certified at the DoW 8140 intermediate level, thus will need a CASP, Security+, CISSP, or CISM certification.

Experience working with RMF, NIST, and other federal guidelines.

Experience utilizing assessment tools (e.g., ACAS, SCAP, HBSS) and RMF process tools (e.g., MCCAST, eMASS, eArcher, etc.).

Security Testing and Evaluation Experience.

Experience with Assured Compliance Assessment Solution (ACAS), STIGs, and SCC.

Preferred Q ualifications:

Marine Corps ISSO experience

DoD Information Technology Portfolio Repository, Department of the Navy experience preferred.

Knowledge of information security systems and applications for DoD projects (Marine Corps programs preferred).

Knowledge of DoDI 8510.01; NIST 800 series publications; Intelligence Community Directive (ICD) 503; DoD Intelligence Information System (DoDIIS)-Joint Security Implementation Guide (DJSIG); Intelligence Community Information Technology Systems Security Risk Management; emerging cybersecurity policies; and all other policies, orders, and directives pertaining to the role.

Clearance Requirements:

• Must have a current / active Top Secret / SCI clearance.

Please select the highest level of security clearance you possess.