ISSO 1-FFLL-8964

Onyx Point, Inc.; Hanover (MD); On-site; USD 78,000 - 250,000; Full time

Benefits offered by this job

Health Coverage: Medical, dental, and视

Retirement Plan: 401(k) plan with**

Paid Time Off: Generous PTO, holidays

Remote work options

Wellness programs

Tuition reimbursement

Bonus opportunities

Technology allowance

Diverse and inclusive workplace

Job summary

Onyx Point, Inc. is seeking an experienced ISSO to support information security programs and RMF Authorization activities. The role includes developing security documentation, evaluating security solutions, and maintaining an operational security posture for classified systems.

Required DoD 8570 IAT Level I or higher, 5 years ISSO experience on similar programs, and a Bachelor's degree in Computer Science or related field. Location-based compensation applies; security clearance is mandatory.

Qualifications

• 5 years experience as an ISSO on programs/contracts of similar scope, type and complexity.
• Experience in security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools.
• Bachelor’s degree in Computer Science or related discipline from an accredited college or university.
• DoD 8570 compliance with IAT Level I or higher is required.
• Four (4) years of additional ISSO experience may be substituted for a bachelor’s degree.

Responsibilities

• Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards and methodologies.
• Assist with preparation and maintenance of documentation
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information
• Assist with the CM for information system security software, hardware and firmware
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades
• Propose, coordinate, implement and enforce information systems security policies, standards and methodologies
• Develop and maintain documentation for C&A in accordance with ODNI and DoD policies
• Provide CM for security-relevant information system software, hardware and firmware
• Develop system security policy and ensures compliance
• Evaluate security solutions to ensure they meet security requirements for processing classified information
• Maintain operational security posture for an information system or program
• Provide support to the ISSM for maintaining the appropriate operational IA posture for a system, program or enclave
• Develop and update the system security plan and other IA documentation
• Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
• Administer the user identification and authentication mechanism of the Information System (IS)Provides support for a program, organization, system or enclave’s information assurance program.

Skills

RMF knowledge

Risk assessment

Security documentation

C&A packages

SRTMs

Education

Bachelor's degree in Computer Science or related discipline

Tools

Splunk

Job description

TO BE CONSIDERED FOR THIS POSITION YOU MUST HAVE AN ACTIVE TS/SCI W/ FULL SCOPE POLYGRAPH SECURITY CLEARANCE (U.S. CITIZENSHIP REQUIRED)

The ISSO

• Supports information security
• Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system’s security posture.
• Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes.
• Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs.
• Supports system authorization under the NIST Risk Management Framework (RMF).
• Uses Splunk to monitor security events, analyze logs, and support incident response.

Five (5) years experience as an ISSO on programs and contracts of similar scope, type and complexity is required. Experience is to include at least one (1) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools. Bachelor’s degree in Computer Science or related discipline from an accredited college or university is required. DoD 8570 compliance with IAT Level I or higher is required. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.

Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards and methodologies

Assist with preparation and maintenance of documentation

Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information

Assist with the CM for information system security software, hardware and firmware

Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades

Propose, coordinate, implement and enforce information systems security policies, standards and methodologies

Develop and maintain documentation for C&A in accordance with ODNI and DoD policies

Provide CM for security-relevant information system software, hardware and firmware

Develop system security policy and ensures compliance

Evaluate security solutions to ensure they meet security requirements for processing classified information

Maintain operational security posture for an information system or program

Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system, program or enclave

Develop and update the system security plan and other IA documentation

Assist with the management of security aspects of the information system and perform day-to-day security operations of the system

Administer the user identification and authentication mechanism of the Information System (IS)Provides support for a program, organization, system or enclave’s information assurance program.

Description:

Provides support for proposing, coordinating, implementing and enforcing information systems security policies, standards and methodologies. Maintains operational security posture for an information system or program to ensure information systems security policies, standards and procedures are established and followed. Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware and firmware. Manages changes to system and assesses the security impact of those changes. Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages and System Requirements Traceability Matrices (SRTMs). Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).

Compensation:

We are committed to providing fair and competitive compensation. The salary range for this position is $78,000 to $250,000 per year. This range reflects the compensation offered across the locations where we hire. The exact salary will be determined based on the candidate's work location, specific role, skill set, and level of expertise.

Benefits:

• Health Coverage: Medical, dental, and vision insurance
• Additional Insurance: Basic Life/AD&D, Voluntary Life/AD&D, Short and Long-Term Disability, Accident, Critical Illness, Hospitalization Indemnity, and Pet Insurance
• Retirement Plan: 401(k) plan with company match
• Paid Time Off: Generous PTO, paid holidays, parental leave, and more
• Wellness: Access to wellness programs and mental health support
• Professional Development: Opportunities for growth, including tuition reimbursement
• Flexible work arrangements, including remote work options
• Flexible Spending Accounts (FSAs)
• Employee referral programs
• Bonus opportunities
• Technology allowance
• A diverse, inclusive, and supportive workplace culture

A diverse, inclusive, and supportive workplace culture