Information Systems Security Officer Senior (ISSO)

InvestedintheMission; Greenwood Village (CO); On-site; USD 120,000 - 135,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

PTO

401K

Job summary

York Space Systems in Greenwood Village, CO, seeks an Information Systems Security Officer Senior (ISSO) to lead RMF implementation and manage security posture across the information system lifecycle.

This role performs RMF packages in eMASS, coordinates with the Security Controls Assessor and Authorizing Official, and conducts risk assessments, SSP maintenance, and STIG compliance to protect critical systems.

Qualifications

• 5+ years IA/Cyber Security experience
• Experience documenting DoD A&A artifacts
• Knowledge of RMF, NIST 800-series and CNSSI 1253

Responsibilities

• Oversee RMF day-to-day operations
• Manage tasks and deadlines for security requirements
• Lead RMF package building in eMASS
• Maintain SSPs, POA&Ms, SCTMs, SOPs
• Coordinate with SCA and AO
• Monitor system security posture across lifecycle
• Perform security assessments and vulnerability reviews

Skills

IA/Cyber Security

RMF

DoD A&A documentation

CNSSI 1253/NIST 800 series

Security+ or CISM

eMASS/STIGs/SCAP

Active Secret clearance

Communication skills

Education

Bachelor’s degree in CS or Security

Tools

eMASS

STIGs

SCAP

Job description

Position: Information Systems Security Officer Senior (ISSO)

Location: Greenwood Village, CO

Job Id: 743

# of Openings: 1

Salary: $120,000-$135,000

York Space Systems was founded to radically improve spacecraft affordability and reliability, transforming, and enabling next generation space mission operations worldwide. Today, it is one of the most innovative aerospace companies, specializing in both end-to-end customer solutions and the rapid production of spacecraft platforms. York’s complete Space Segment Solution including spacecraft production, payload integration, system integration & test, launch services, ground segment services, and mission operations enables customers to leverage York’s existing technology solutions to get rapidly and responsively to orbit. We’re looking to expand our team across the board.

Responsibilities

• Oversee day-today operations required to perform RMF
• Manage tasks and create deadlines to meet security requirements
• Be forward facing for customer interactions which will translate into system requirements
• Spearhead building RMF packages within eMASS and perform continuous monitoring for the full duration of the information system lifecycle
• Implement the Risk Management (RMF) process throughout the entire A&A lifecycle of the system(s) or multiple ATOs across different locations, supporting all efforts pre and post Authority to Operate (ATO) determination
• Assist the ISSM in meeting their duties to support A&A activities and coordinate with system’s Security Controls Assessor (SCA) and Authorizing Official (AO)
• Perform and review technical security assessments of the system(s) to identify points of vulnerability, non-compliance with established cybersecurity standards and regulations, and recommend mitigation strategies to maintain operational security posture for the boundary systems
• Conduct risk analyses from vulnerability, compliance scans, penetration testing results, and/or other audit activities
• Create and maintain Plan of Action and Milestones (POA&Ms), System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Standard Operating Procedures (SOPs), Configuration Management Plans, Contingency Plans and Test Result/Security Impact Analyses
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media
• Conduct continuous monitoring (ConMon) activities for applicable authorization boundaries
• Apply and maintain up to date application of Security Technical Implementation Guides (STIGs) to required components of the information systems
• Maintain inventory and asset configuration to include change management documentation
• Lead System level change request through formalized Configuration Control boards (CCB)
• Ensure that the appropriate operational security posture is maintained for the information system, working in close collaboration with the information system owner and the ISSM
• Notify ISSM when changes occur that might affect the authorization determination of the information system(s)
• Experience in advising System Administrators and Network Administrator to Remediate system decencies
• Report all security-related concerns and incidents to the ISSM
• Able to also handle security concerns in lieu of ISSM advise on security concerns IAW system procedures

Required Qualifications

• Experience developing and documenting DoD Assessment and Authorization documentation
• Knowledge of CNSSI 1253, NIST 800 Series (primarily 800-53, 800-53A, 800-171), RMF
• 5 + years of IA/Cyber Security experience
• Bachelor’s degree or higher in Computer Science or Security
• Security+/CISM certification or equivalent
• Experience with DCSA tools such as eMASS, STIGs and SCAP
• Possess an Active Secret clearance or higher

Requirements / Preferred Qualifications

• Well versed with RMF package creation and maintenance artifacts to support A&A decision
• Experience using DISA Security Technical Implementation Guides (STIGs), Security Requirements Guide (SRGs) and Security Content Automation Protocol (SCAP) to audit and securely configure network-enabled devices
• Fundamental knowledge of DISA Enterprise Mission Assurance Support Service (eMASS)
• Proficient with vulnerability tools and audit review tools which include audit log analysis and report generation (Nessus and Splunk experience preferred)
• Experience conducting risk analysis on products and system components through review of CVEs, plugins, CWEs
• Experience in conducting software due diligence with COTS and GOTS solutions
• Strong communication and documentation skills
• Flexible and able to adapt to a rapidly changing environment
• Positive, self-motivated individual who can complete tasks independently
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.

Benefits

In addition to compensation, York Space Systems is proud to offer a comprehensive benefits package including medical, dental, and vision insurance along with PTO and a 401K.

York Space Systems provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, military or protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Must have permanent authorization to work in the United States. This policy applies to all terms and conditions or employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. YORK SPACE SYSTEMS IS AN EEO EMPLOYER.