Information Systems Security Officer (ISSO)

Avion Solutions; Huntsville (AL); In loco; USD 100.000 - 140.000; Tempo pieno

Descrizione del lavoro

Avion Solutions is seeking an Information Systems Security Officer (ISSO) in Huntsville, AL. The candidate will support PAE Aviation, ensuring compliance with DoD/NIST standards and security controls while maintaining required documentation.

The role requires a Bachelor’s degree, IAT II, and active Secret clearance, plus 5+ years’ experience (7+ with AA/AS). Strong communication skills and experience with RMF/eMASS are essential.

Competenze

• Bachelor's degree required.
• 5+ years of experience (7+ years with AA/AS).
• IAT II Certification.
• Experience with RMF.
• Experience with eMASS.
• Ability to interpret and apply DOD and Army cyber instructions.
• Excellent written and oral communication skills.
• U.S. citizen with active Secret clearance.
• Understanding of DISA STIGs.

Mansioni

• Assist in development of application security policies.
• Establish procedures to track and mitigate ATO risks.
• Develop and update SSPs and documentation.
• Tailor security baselines for general support and cloud systems.
• Collect and validate control implementation statements.
• Oversee control implementation statements per NIST SP 800-53.
• Assist with migration to NIST SP 800-53 Rev 5 and training.
• Conduct security reviews for hardware, software, and connections.
• Review POA&M outputs and closure recommendations.
• Support ISCM and continuing authorization requirements.
• Document and communicate control deficiencies for POA&M.

Conoscenze

IAT II Certification

RMF knowledge

DOD/Army cyber regulations

Strong written and oral communication

Security policy implementation

Formazione

Bachelor's degree (BA/BS)

Strumenti

eMASS

RMF tooling

DISA STIGs

Descrizione del lavoro

Avion Solutions Inc., an employee-owned company, is seeking candidates for an Information Systems Security Officer (ISSO) to support PAE Aviation. This position is based in Huntsville, AL, and contingent upon award.

Job Responsibilities/Duties:

• Assist in the development of application security policies.
• Establish procedures & processes to ensure tracking and mitigation of risks identified during the ATO process.
• Develop and update Interconnection Security Agreement documentation as needed.
• Develop and update System Security Plans (SSPs) and supporting documentation.
• Assist with tailoring of security control baselines for general support systems and other FISMA reportable systems, including cloud systems utilizing FedRamp controls.
• Collect and validate control implementation statements from subject matter experts.
• Oversee development of security and privacy control implementation statements per NIST SP 800-53 and agency security policy standards.
• Assist with the migration to NIST SP 800-53 Rev 5, identifying gaps and providing understanding of new requirements to technical teams for implementation.
• Conduct security reviews for changes impacting hardware, software, baselines, connections, or applications.
• Review and assess POA&M outputs, recommending additional work or closure.
• Support the continuous monitoring program as necessary when Information System Continuous Monitoring (ISCM) results will be used to support continuing authorization requirements or ongoing authorizations.
• Document and communicate control deficiencies for POA&M consideration.
• Assist in developing security policies, ensuring compliance, and updating documentation.
• Provide information for status reports, briefings, schedules, and project plans in written and oral form.
• Compliance and Auditing processes and inspections for all applications; ensures validity and accuracy review of all associated documentation.
• Performs compliance reviews of applicable STIGs, performs risk assessments, and performs security test evaluations and audits.
• Analyzes security requirements for information protection for enterprise applications.
• Other duties as assigned.

Required Experience:

• Bachelor's degree (BA/BS).
• 5+ years of experience (7+ years with AA/AS).
• IAT II Certification.
• Experience with RMF.
• Experience with eMASS.
• Ability to interpret and apply DOD and Army-level cyber instructions and regulations.
• Ability to apply cybersecurity theories and principles to an IT system.
• Excellent written and oral communication skills.
• Understanding of the application of DISA STIGs.
• Ability to manage people, schedules, tasks, and projects.
• Must be a U.S. citizen and have an active Secret security clearance.

Preferred Qualifications:

• Experience with Windows and Linux operating systems.
• Experience with Trellix, ESS, Elastic, ACAS, NESSUS, SCCM, PowerShell.

Equal Opportunity:

Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants for employment. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor that affords equal employment opportunities to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin, or any other reason prohibited by law.