Information Systems Security Officer

MANTECH; Maryland; Presencial; USD 110.000 - 140.000; Tempo integral

Resumo da vaga

MANTECH seeks an experienced and passionate Information Systems Security Officer (ISSO) to join our team supporting in Annapolis Junction, MD.

The ISSO will support IA programs, enforce security policies, and maintain SSPs and RMF artifacts while operating on-site in Maryland. A TS/SCI with Polygraph is required with DoD 8570 IAM Level 1 or higher certification.

Qualificações

• Bachelor’s degree in Computer Science or related field with 10+ years ISSO experience or 14 years total ISSO experience in lieu of a degree.
• DoD 8570 IAM Level 1 or higher certification is required.
• Experience in at least two of: security tools/hardware/software implementation, communication prototypes, or encryption techniques/tools.
• Hands-on experience preparing and reviewing SSPs, risk assessments, and authorization documentation.

Responsabilidades

• Support IA programs to safeguard critical infrastructure.
• Propose, coordinate, implement, and enforce security policies, standards, and methodologies across systems.
• Establish and maintain operational security posture and day-to-day security operations.
• Provide CM for security software, hardware, and firmware while managing changes and assessing impacts.
• Prepare, review, and maintain SSPs, risk assessment reports, C&A/A&A packages, and SRTMs.
• Support RMF-based security authorization activities in compliance with Government standards.

Conhecimentos

ISSO experience

DoD 8570 IAM Level 1

SSP/risk assessment experience

Security policy implementation

Formação

Bachelor’s degree in Computer Science or related discipline

Descrição da vaga

MANTECH seeks an experienced and passionate, career and customer-oriented Information Systems Security Officer (ISSO) to join our team supporting in Annapolis Junction, MD.

Responsibilities Include But Are Not Limited To

• Support organization, system, or enclave Information Assurance (IA) programs to safeguard critical infrastructure.
• Propose, coordinate, implement, and enforce security policies, standards, and methodologies across all assigned systems.
• Establish and maintain operational security posture and day-to-day security operations.
• Provide configuration management (CM) for security software, hardware, and firmware while managing system changes and assessing security impacts.
• Prepare, review, and maintain System Security Plans (SSPs), Risk Assessment Reports, Security Assessment & Authorization (C&A/A&A) packages, and Security Requirements Traceability Matrices (SRTMs).
• Support security authorization activities in strict compliance with Government standards and the Risk Management Framework (RMF).

Minimum Qualifications

• Bachelor’s degree in Computer Science or related discipline from an accredited college or university with 10+ years of experience as an ISSO (or 14 years of total ISSO experience in lieu of a degree).
• DoD 8570 compliance with Information Assurance Management (IAM) Level 1 or higher certification.
• Demonstrated experience in at least two (2) of the following areas: current security tools/hardware/software security implementation, communication prototypes, or encryption techniques/tools.
• Hands-on experience preparing and reviewing System Security Plans (SSPs), risk assessments, and authorization documentation.

Preferred Qualifications

• Experience deploying and configuring security scanning tools in support of continuous monitoring processes.
• Experience managing configuration management tickets, firewall implementations, SSP changes, and Account Management.
• Experience designing and implementing Plans of Action and Milestones (POA&M) to remediate vulnerability and risk findings.
• Experience reviewing, preparing, and updating ATO packages in accordance with NIST Risk Management Framework (RMF) and customer policies.

Clearance Requirements

• Must have a current/active TS/SCI with Polygraph.

Physical Requirements

• Must be able to remain in a stationary position for extended periods of time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, and must be able to exchange accurate information in these situations.