Information Systems Security Officer – RMF & DoD A&A

SMS Data Products Group, Inc.; Edwards (CA); In loco; USD 90.000 - 110.000; Tempo pieno

Descrizione del lavoro

SMS Data Products Group, Inc. is seeking an Information Systems Security Officer (ISSO) I to support the Air Force Research Laboratory at Edwards Air Force Base.

The ISSO I provides cybersecurity, A&A, and RMF support across the system lifecycle, developing security documentation and collaborating with system owners and government stakeholders to ensure DoD and NIST compliance. Responsibilities include maintaining SSPs/POA&Ms, supporting testing and continuous monitoring, configuring secure

Competenze

• 3+ years of cybersecurity, information assurance, or related experience including RMF activities.
• Working knowledge of DoD RMF and A&A processes, including SSPs, POA&Ms, security controls, risk assessments, continuous monitoring, and authorization documentation.
• Familiarity with DoDI 8510.01, NIST guidance, DISA STIGs, and applicable DoD cybersecurity requirements.
• Experience supporting vulnerability assessment, security compliance, and remediation activities; familiarity with tools such as Nessus, SCAP, ACAS, or Tenable.
• Technical understanding of enterprise infrastructure, Microsoft Windows, Linux, networking, and common cybersecurity technologies sufficient to support system security activities.
• Strong documentation, analytical, organizational, and communication skills with the ability to coordinate across technical and non-technical stakeholders.
• Ability to obtain and maintain a DoD Secret Security Clearance.
• Ability to obtain and maintain applicable DoD 8140 workforce qualification requirements within the required timeframe.
• Maintain an IAT level II certification.

Mansioni

• Develop, maintain, and update System Security Plans (SSPs), risk assessments, Plans of Action and Milestones (POA&Ms), and other RMF/A&A authorization artifacts.
• Categorize information systems and support security-control selection using DoDI 8510.01, NIST SP 800-60, applicable RMF baselines, and the RMF IT Categorization and Selection Checklist (ITCSC).
• Evaluate system risks and vulnerabilities using RMF methodology and recommend mitigation or remediation strategies.
• Collaborate with system owners, system administrators, cybersecurity personnel, assessors, and other stakeholders throughout the A&A process.
• Ensure security controls are incorporated into system design and operations; support testing, validation, and collection of evidence demonstrating control effectiveness.
• Use vulnerability and compliance tools such as Nessus or SCAP to identify technical vulnerabilities, support remediation, and validate secure configurations.
• Validate systems against applicable DISA Security Technical Implementation Guides (STIGs), document deviations, and coordinate corrective actions.
• Establish and support continuous monitoring activities, maintain visibility of system security posture, and provide status to the ISSM and Authorizing Official (AO).
• Maintain accurate documentation for system changes, secure configurations, cybersecurity incidents, threats, deficiencies, mitigations, and authorization decisions.
• Support assessment teams by providing required documentation, evidence, and system access for security-control testing.
• Verify systems meet applicable security criteria before AO review and support ATO/DTO risk decisions with clear summaries of system risk posture.
• Provide DoD RMF and cybersecurity subject-matter support to technical teams, customers, and decision-makers.
• Ensure required users and administrators complete System Rules of Behavior and Authorized Use Agreements in accordance with applicable Air Force, Space Force, and AFRL RMF guidance.

Conoscenze

RMF knowledge

A&A processes

Nessus

SCAP

ACAS

Windows

Linux

Documentation

DoD Secret clearance

IAT II certification

Strumenti

Nessus

SCAP

ACAS

Tenable

eMASS

Descrizione del lavoro

SMS Data Products Group, Inc. is seeking an Information Systems Security Officer (ISSO) I to support the Air Force Research Laboratory at Edwards Air Force Base.

The ISSO I provides cybersecurity, A&A, and RMF support across the system lifecycle, developing security documentation and collaborating with system owners and government stakeholders to ensure DoD and NIST compliance. Responsibilities include maintaining SSPs/POA&Ms, supporting testing and continuous monitoring, configuring secure