Information Systems Security Officer 2 - (NIST RMF, SSP, C&A)

Akina, Inc.; Maryland; On-site; USD 174,000 - 213,000; Full time

Benefits offered by this job

PTO 24 days

Federal holidays 11

401k 10% company match

Healthcare fully covered for employees

Dependent coverage 50%

Educational assistance

Job summary

Akina, Inc. in Annapolis Junction, Maryland, seeks an Information Systems Security Officer 2 to support RMF-based security programs and maintain the security posture for classified systems.

The role requires TS/SCI with polygraph, DoD 8570 IAM Level I or higher, and ten years of ISSO experience on comparable programs. You will develop and maintain SSPs, A&A artifacts, and SRTMs, and coordinate risk assessments and security tooling.

Qualifications

• Ten years of ISSO experience on programs/contracts of similar scope
• Bachelor’s degree in Computer Science or related discipline
• Four years of additional ISSO experience may substitute for a Bachelor’s degree
• Experience in at least two of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
• DoD 8570 compliance with IAM Level I or higher

Responsibilities

• Provide support for an IA program and maintain the operational security posture for information systems in RMF compliance
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Maintain records and posture for workstations, servers, routers, firewalls, hubs, and switches
• Prepare, review, and update SSPs, RARs, C&A packages, and SRTMs
• Perform vulnerability/risk assessment analyses and evaluate security solutions
• Manage configuration management for security hardware/software/firmware and assess changes
• Administer user identification and authentication mechanisms and support the ISSM

Skills

NIST RMF policies

SSP/C&A/SRTM docs

Risk/vulnerability assessment

Configuration management

DoD 8570 IAM Level I+

Current security tools

Hardware/software security

Communication protocols

Encryption techniques/tools

Education

Bachelor’s degree in Computer Science or related field

Job description

Information Systems Security Officer 2 - (NIST RMF, SSP, C&A)

• Annapolis Junction, Maryland

Information Systems Security Officer 2 - (NIST RMF, SSP, C&A)

Clearance: TS/SCI - Polygraph required
Position ID: 21-2-ISSO2
Location: Annapolis Junction, Maryland

Description:

Provide support for a program, organization, system, or enclave’s Information Assurance (IA) program. Maintain the operational security posture for information systems and support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and ODNI/DoD policies.

• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Maintain records and operational security posture for workstations, servers, routers, firewalls, intelligent hubs, and network switches.
• Prepare, review, and update documentation including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Perform vulnerability/risk assessment analysis and evaluate security solutions to ensure compliance with classified processing requirements.
• Manage configuration management (CM) for security-relevant hardware, software, and firmware, and assess the security impact of system changes.
• Administer user identification and authentication mechanisms and support the Information System Security Manager (ISSM).

Position Required Skills:

• NIST RMF, NISCAP, ODNI, and DoD security policies
• SSP, C&A, and SRTM documentation creation and maintenance
• System security evaluation and risk/vulnerability assessment
• Configuration Management for security software/hardware/firmware
• Experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
• DoD 8570 compliance with IAM Level I or higher

ISSO2 Qualifications:

Experience: Ten (10) years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.

Education: Bachelor’s degree in Computer Science or a related discipline from an accredited college or university.

Four (4) years of additional ISSO experience may be substituted for a Bachelor’s degree.

Must include experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools.

Certifications: DoD 8570 compliance with IAM Level I or higher required.

Salary Range: $174k-$213k (Annually)

The range displayed above is a likely salary range for this position. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possible contractual requirements and could fall outside of this range.

Akina is a Woman Owned, Service Disabled, Veteran Owned, Small Business, looking for talented and ambitious individuals to join our team. We offer a generous compensation package that includes 24 days PTO accrued annually and 11 federal holidays. Our 401k is 100% vested on your start date and the company makes a direct contribution worth 10% of your salary. Akina covers 100% of healthcare costs for employees and 50% toward dependents. We offer educational assistance towards college classes and will cover costs associated with job related training and certifications.

Akina is committed to excellence and creating innovative and flexible solutions for our clients. We are a small company with an open ear to our employees' needs in order to attract and retain quality talent that enables our customer's mission.

We are an equal employment opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.