Information Systems Security Officer

Mantis Security Corporation; Reston (VA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Competitive benefits

Job summary

Mantis Security Corporation seeks an experienced ISSO to lead Assessment and Authorization (A&A) for multiple analytic mission systems. You will generate and maintain complete Security BoE, guide RMF processes, and ensure all NIST 800-53 controls are properly implemented and tested.

You will use Xacta to manage BoE files, review documentation for accuracy, and coordinate POA&Ms with engineers and project managers to close open findings.

Qualifications

• DoD 8570 IAT Level II certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP).
• Active TS/SCI eligibility or clearable/Current TS/SCI.
• CI polygraph ability or current clearance path.
• Bachelor’s degree or higher with required years of experience.

Responsibilities

• Lead A&A activities according to RMF for multiple systems.
• Develop and maintain Security BoE, SSP, CONOPS, STP and STP documentation.
• Plan security testing, maintain STPs, and support security assessments.
• Utilize RMF guidance and NIST controls to implement secure configurations.
• Maintain Security BoE files and manage A&A cycles per system release.
• Advise on security policy application and documentation adequacy.
• Collaborate with program managers to close POA&Ms and mitigate findings.

Skills

RMF & A&A processes

NIST 800-37/800-53 knowledge

Xacta usage

Security policy guidance

POA&M management

SSP/STP documentation

Education

Bachelor’s degree + 9 years experience

Master’s degree + 7 years experience

No degree + 13 years experience

Tools

Xacta IA Manager

Job description

Mantis Security is seeking for immediate placement a highly qualified and technical Information Systems Security Officer (ISSO) to lead the Assessment and Authorization (A&A) for multiple analytic mission systems. The ISSO must be proficient in standard A&A activities, and will generate and maintain the complete security body of evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF).

Duties Include:

Support to the Assessment and Authorization (A&A) and all Risk Management Framework (RMF) processes (ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, etc.) for all multiple information systems

Ensure validity and accuracy review of all associated security documentation

Create and maintain System Security Plan (SSP), Security CONOPS, Security Test Plan (STP) and Security Test Procedures, document and maintain implementation details of NIST 800-53 security controls

Plans and performs security functional testing, creates and maintains STPs, supports security assessments

Utilize Xacta to maintain Security Body of Evidence (BoE) files and to work through the A&A process for each system release cycle

Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation

Manage the plan of action and milestones (POA&Ms) by working with project managers and engineers to develop schedules and engineering actions that mitigate open findings

Monitor and audit operational systems for proper use

Must have:

Bachelor’s degree with 9 years of experience, or Master’s degree with 7 years of experience, or no degree with 13 years of experience

DoD 8570 IAT Level II certification requirements (one of CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP)

Most having current TS/SCI eligibility or Active TS/SCI

Must be able to obtain a CI polygraph

Nice to have:

Proficiency with Xacta IA Manager (or Xacta 360)

We believe that our strength is in our employees. We offer employees the chance to work with great people on projects of high importance and are committed to providing the best culture that foster’s technical innovation and personal growth. To help our staff achieve a productive work-life balance, we offer a full range of highly competitive benefits for our employees and their families. For more information visit our website at https://www.mantissecurity.com