Information Systems Security Manager - Basic (IFMC)

Mission Driven Research; Huntsville (AL); On-site; USD 90,000 - 150,000; Full time

Job summary

Mission Driven Research in Huntsville, AL, seeks an Information Systems Security Manager to support a Cyber Compliance Team providing ISSM-Basic support for tactical systems. You will perform cybersecurity analysis on hardware and software and drive RMF Assessment and Authorization efforts.

Qualifications include US citizenship and US Secret clearance (Top Secret a plus), DoD RMF and NIST SP 800-160 knowledge, and experience with STIGs, ACAS/Nessus, and eMASS.

Qualifications

• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field).
• Experience with RMF, DoD STIGs, NIST controls and security assessment tools.

Responsibilities

• Provide accurate technical evaluations of equipment, software, full systems, or network against NIST controls.
• Select and assess security controls, timely accreditation packages, mitigations and maintain security posture.
• Must have experience with eMASS and initiating, updating RMF packages.
• Identify, assess and document system threats/risks; validate security requirements and coordinate certification activities.
• Work with developers to update, maintain RMF/POA&M documentation.
• Document preliminary or residual risks and manage Authorization Packages.
• Monitor DoD security/compliance and validate results; coordinate with teams for RMF readiness.

Skills

RMF knowledge

System security

DoD STIGs

ACAS

Nessus

SCC

eMASS

POA&M

System architecture

Education

Associate degree in Engineering/IT/Cyber-related field

Bachelor’s degree in Engineering/IT/Cyber-related field

Job description

As the Information Systems Security Manager, you will be supporting a Cyber Compliance Team providing ISSM-Basic support for tactical systems. The person will be a key member of a team performing Hardware and Software Cybersecurity analysis along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems. Candidate must be able to prioritize competing requirements for time and resources and be able to adjudicate resource requirements based on understanding of Government customer and mission needs.

Principal Duties and Responsibilities:

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and document the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Selecting and assessing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system's lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Ability to work with system developer to update, maintain, and track RMF and POA&M documentation.
• Documenting preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.
• Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Qualifications:

• U.S. Citizen
• Must possess and maintain a US Secret security clearance. Top Secret, SCI eligible, security clearance is a plus.

Required Skills / Experience:

• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field)
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Knowledge of information system architecture and standards as they apply to cyber security
• Knowledge of NIST SP 800-160, Systems Security Engineering

Preferred Skills / Experience:

• Bachelor's Degree (Engineering, IT or Cyber-related field)
• Strong desire to contribute to overall team success
• Excellent written and oral communication skills
• High degree of proficiency in MS Office Suite

Mission Driven Research is an Equal Opportunity Employer, including disability/veterans. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.