Isso 1-Ffll-8964

Onyx Point, LLC.; Hanover (MD); Remote; USD 78,000 - 250,000; Full time

Benefits offered by this job

Health coverage

401(k) with company match

Generous PTO

Wellness programs

Tuition reimbursement

Technology allowance

Job summary

Onyx Point, LLC. seeks an Information System Security Officer (ISSO) with an active TS/SCI w/ full scope polygraph. You will support information security, enforce policies, manage RMF activities, and oversee security operations for classified systems.

Responsibilities include preparing SSPs, risk assessments, C&A packages, managing RMF, and using Splunk for monitoring to maintain system security plans and IA posture. DoD 8570 IAT Level I or higher is required.

Qualifications

• Active TS/SCI w/Full Scope Polygraph required.
• Bachelor's degree in CS or related discipline.
• DoD 8570 compliance with IAT Level I or higher required.

Responsibilities

• Support information security and enforce security policies.
• Assess security risks and solutions for critical information systems.
• Prepare and review SSPs, risk assessments, C&A packages, and SRTMs.
• Support RMF-based security authorization and monitoring.

Skills

Security policies

RMF

Splunk

C&A packages

SSP

risk assessments

Documentation

Education

Bachelor's degree in Computer Science or related discipline

Tools

DoD 8570 compliance

Job description

REQUIRED: TO BE CONSIDERED FOR THIS POSITION YOU MUST HAVE AN ACTIVE TS/SCI W/ FULL SCOPE POLYGRAPH SECURITY CLEARANCE (U.S. CITIZENSHIP REQUIRED)

The ISSO

• Supports information security
• Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system’s security posture.
• Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes.
• Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs.
• Supports system authorization under the NIST Risk Management Framework (RMF).
• Uses Splunk to monitor security events, analyze logs, and support incident response.

Five (5) years experience as an ISSO on programs and contracts of similar scope, type and complexity is required. Experience is to include at least one (1) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools. Bachelor’s degree in Computer Science or related discipline from an accredited college or university is required. DoD 8570 compliance with IAT Level I or higher is required. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.

Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards and methodologies

Assist with preparation and maintenance of documentation

Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information

Assist with the CM for information system security software, hardware and firmware

Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades

Propose, coordinate, implement and enforce information systems security policies, standards and methodologies

Develop and maintain documentation for C&A in accordance with ODNI and DoD policies

Provide CM for security-relevant information system software, hardware and firmware

Develop system security policy and ensures compliance

Evaluate security solutions to ensure they meet security requirements for processing classified information

Maintain operational security posture for an information system or program

Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system, program or enclave

Develop and update the system security plan and other IA documentation

Assist with the management of security aspects of the information system and perform day-to-day security operations of the system

Administer the user identification and authentication mechanism of the Information System (IS)Provides support for a program, organization, system or enclave’s information assurance program.

Description

Provides support for proposing, coordinating, implementing and enforcing information systems security policies, standards and methodologies. Maintains operational security posture for an information system or program to ensure information systems security policies, standards and procedures are established and followed. Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware and firmware. Manages changes to system and assesses the security impact of those changes. Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages and System Requirements Traceability Matrices (SRTMs). Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).

Compensation

We are committed to providing fair and competitive compensation. The salary range for this position is $78,000 to $250,000 per year. This range reflects the compensation offered across the locations where we hire. The exact salary will be determined based on the candidate's work location, specific role, skill set, and level of expertise.

Benefits

• Health Coverage: Medical, dental, and vision insurance
• Additional Insurance: Basic Life/AD&D, Voluntary Life/AD&D, Short and Long-Term Disability, Accident, Critical Illness, Hospitalization Indemnity, and Pet Insurance
• Retirement Plan: 401(k) plan with company match
• Paid Time Off: Generous PTO, paid holidays, parental leave, and more
• Wellness: Access to wellness programs and mental health support
• Professional Development: Opportunities for growth, including tuition reimbursement

Additional Perks

• Flexible work arrangements, including remote work options
• Flexible Spending Accounts (FSAs)
• Employee referral programs
• Bonus opportunities
• Technology allowance
• A diverse, inclusive, and supportive workplace culture