Information System Security Officer (ISSO)

IPSecure, Inc.; Patrick Space Force Base (FL); On-site; USD 110,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with match

Education Reimbursement

Paid Federal Holidays

Unlimited Vacation

Sick Leave

Reimbursement Program

Prepaid Legal Plan

ID Protection

Disability Insurance

Job summary

IPSecure is seeking an Information System Security Officer to support RMF for DoD programs at Patrick AFB, Melbourne, FL. The role involves developing RMF artifacts, conducting control assessments, and maintaining an effective information security program in coordination with CISO, PM, ISSM, and ISO.

Ideal candidates have TS/SCI clearance, 3+ years in IA or cybersecurity in classified environments, DoD 8570 IAM Level I or higher (CISSP preferred), and hands-on experience with NIST 800-53

Qualifications

• Bachelor’s degree in Cybersecurity or related field and 3+ years of experience, or Master’s degree.
• Active Top Secret clearance w/SCI.
• Experience in information assurance or cybersecurity roles for classified DoD environments.
• DoD 8570 IAM Level I (Security+) or higher baseline certification (CISSP preferred).
• Security+ w/CE’s certification.
• Working knowledge of NIST 800-53 controls and RMF.

Responsibilities

• Develop and maintain RMF body of evidence documentation (SSP, TPM, POAM) and artifacts using Word/Excel/Visio.
• Maintain repositories of evidence for systems under purview and ensure access is restricted.
• Develop and execute security control assessment procedures for continuous monitoring and authorization.
• Collaborate with system administrators and cyber team to maintain secure operation and posture.
• Support IS/CSO in maintaining authorization to operate and POA&M actions; monitor changes.
• Ensure all security vulnerabilities are documented in POA&M and tracked.
• Integrate cybersecurity across the IT lifecycle and educate/awareness programs.
• Coordinate hardware/software changes with ISSO/ISSM prior to updates.
• Ensure STIG compliance and security configuration guidelines.
• Report incidents to CISO/ISSM/wing cybersecurity office per AFI 17-203.

Skills

Top Secret clearance w/ SCI

RMF knowledge

CISSP or Security+ CE

NIST 800-53

Vulnerability assessment tools

Information assurance experience

Education

Bachelor’s degree in Cybersecurity or related field

Master’s degree

Tools

Tenable Nessus

Security Center

SolarWinds

EndPoint Security Solutions

Vulnerator

SCAP Compliance Checker

Job description

Position:Information System Security Officer (ISSO)

Location: Patrick AFB, Melbourne, FL

Job Id:900

# of Openings:1

Information System Security Officer (ISSO) - TS/SCI Clearance Required - Location: Patrick SFB, Melbourne, FL

Job Description

IPSecure is seeking an Information System Security Officer to provide Risk Management Framework (RMF) support. We want you to join our qualified and diverse team of professionals where you can apply your talents to take our team to new levels of performance. This position primarily supports collateral Top Secret and below programs performing all aspects of DoD RMF activities. The successful candidate possesses experience ranging from documenting, implementing, and assessing security controls to performing system monitoring and compliance assessment activities. We need a team player who enjoys expanding and sharing their knowledge and training others. You will be involved in all aspects of cybersecurity operations and will partner with program/site leads as well as government staff and mission partners to maintain an effective information security program.

Responsibilities

• Work as part of an integrated team to develop and maintain RMF body of evidence documentation (example: System Security Plan, Security Controls Traceability Matrix, Plan of Action and Milestones, ATO’s) using Microsoft products such as Word, Excel, PowerPoint, and Visio.
• Maintain repositories of all body of evidence documentation for systems under your purview and ensure they are accessible only to properly authorized individuals.
• Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities.
• Work in close coordination with system administrators and other cyber team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures and notify the ISSM when changes occur that might impact system authorization posture.
• Supports the CISO, PM, ISSM or ISO in maintaining current authorization to operate, and approval to connect, and in implementing corrective actions identified in the plan of action and milestones. Coordinates, with the CISO, PM, ISSM and AO staffs, development of an IS Configuration Management strategy and monitor any proposed or actual changes to the system and its environment.
• Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M).
• Ensures the integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the ISSM and ISO.
• Ensure the development and implementation of an effective information security education, training, and awareness program.
• Ensure configuration management policies and procedures for authorizing use of hardware/software on a system are followed and coordinate any additions, changes or modifications to hardware, software, or firmware with the ISSO/ISSM prior to the addition, change or modification.
• Ensures software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides (STIG)/security requirement guides).
• Reports security incidents or vulnerabilities to the CISO/ISSM/wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.

Basic Qualifications

• Bachelor’s degree, Cybersecurity or other related field and 3+ years of experience, or Master’s degree
• Active Top Secret security clearance w/SCI
• Experience working in information assurance or cybersecurity roles supporting classified DoD environments
• DoD 8570 IAM Level I (Security+) or higher baseline certification (CISSP preferred)
• Security+ w/CE’s certification
• Working knowledge of NIST 800-53 controls and RMF
• Experience analyzing and interpreting outputs of various endpoint security, vulnerability, and enumeration tools (example: Tenable Nessus, Security Center, SolarWinds, EndPoint Security Solutions, Vulnerator, SCAP Compliance Checker)

Preferred Qualifications

• Additional training and/or certifications may be required within 6 months of hire
• Proven communication skills to coordinate with program/site leads as well as government staff and mission partners

Medical, Dental, Vision, Unlimited Vacation, Sick Leave, Paid Federal Holidays, Education and Certification Reimbursement Program, 401(k) retirement plan with safe harbor employer match after 3 months, Prepaid legal plan and ID protection plan available, Accident Insurance, Critical Illness Insurance, and Hospital Indemnity Insurance available.

EEOC Statement

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability or status as a protected veteran.

IPSecure is an Equal Opportunity Aff…

EOE, Minorities, Females, Vet, Disabled, Sexual Orientation, Gender Identity or any other protected class. All qualified job seekers are encouraged to apply. IPSecure is committed to America's veterans by providing opportunities for them to continue contributing after service to our nation. We also work to provide reasonable accommodations to individuals with disabilities.

Disability Accessibility Accommodation

- If you have a disability and require assistance with our online application process, please tell us how we can help.
E-mail [e-mail] or call 210-877-1111.

Note:

Pay Transparency - The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.