Information Systems Security Officer

AECOM; Columbia (MD); On-site; USD 115,000 - 165,000; Full time

Job summary

AECOM is seeking a motivated Information System Security Officer (ISSO) based in Hanover, MD. You will be responsible for maintaining security posture, developing security policies, and managing compliance with the Risk Management Framework. Ideal candidates will have extensive experience in information security, risk assessments, and vulnerability management, along with a current/active TS/SCI clearance.

Qualifications

• Fifteen years’ experience as ISSO.
• DoD 8570 compliance with IAM Level 1 or higher is required.
• Experience with security tools and hardware.

Responsibilities

• Ensure operational security posture for Information Systems.
• Develop and update System Security Plans (SSP’s).
• Perform Nessus Vulnerability and Compliance scans.

Skills

Security tools knowledge

Risk Management Framework (RMF)

Communication techniques

Encryption techniques

Nessus Vulnerability scanning

Education

Bachelor's degree in Computer Science or related discipline

Job description

**ManTech** seeks a motivated, career and customer-oriented **Information** **System Security Officer (ISSO)** to join our team in **Hanover, MD**

**Responsibilities Included but are not limited to** :

+ Responsible for ensuring that the appropriate operational security posture is maintained for an Information System, while developing and updating System Security Plans (SSP’s).

+ Responsible for managing and controlling changes to the system and assesses the security impact of those changes. Will also be responsible for creating and implementing security policies, standards, and procedures to protect sensitive information.

+ Will Incorporate and/or implement the Risk Management Framework (RMF) daily and instructs and/or educates management on its necessity for maximum security of data.

+ Responsible for performing Nessus Vulnerability and Compliance scans against all operating system hardware, to interpret technical aspects and information security assessment results, while developing a plan of action for mitigating negative findings

**Minimum Qualifications:**

+ Shall have fifteen (15) years’ experience as an ISSO with a bachelor’s degree in Computer Science or related discipline from an accredited college or university. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.

+ DoD 8570 compliance with Information Assurance Management (IAM) Level 1 or higher is required.

+ Experience to include at least two (2) of the following areas: knowledge of current security tools/hardware/software security implementation, communication prototype, and encryption techniques/tools.

**Preferred Qualifications:**

+ Experience deploying and configuring security scanning tools in support of continuous monitoring processes.

+ Experience providing critical written and verbal analyses of previously generated security architecture documentation and vulnerability and risk assessments.

+ Experience managing a variety of tickets to assist in the CM of the information system, firewall implementations SSP changes and Account Management.

+ Experience designing and implements Plans of Action and Milestones (POAM) to remediate findings from vulnerability and risk assessments.

+ Experience reviewing, preparing, and updating ATO packages in accordance with NIST Risk Management Framework and customer policy, procedures, and guidelines.

**Clearance Requirements:**

+ Must have a current/active TS/SCI w/ Polygraph.

**Physical Requirements:**

+ The candidate must be able to move, carry and deliver workstations from inside the office to customer’s desk. The person in this position must be able to remain in a stationary position 50% of the time. Must communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at [e-mail] and provide your name and contact information.