ISSO 1-FFLL-8964

Onyx Point, Inc.; Maryland; Teletrabalho; USD 78 000 - 250 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health Coverage: Medical, dental, and

401(k) plan with company match

Generous PTO and holidays

Remote work options

Bonus opportunities

Technology allowance

Resumo da oferta

Onyx Point, Inc. is seeking an ISSO to support information security across systems requiring a TS/SCI with Full Scope Polygraph clearance. The role focuses on enforcing security policies, managing RMF activities, and reviewing security documentation to ensure compliance.

Responsibilities include assisting senior ISSOs, maintaining SSPs and SRTMs, and evaluating security solutions for processing classified information. The position may offer flexible remote work options.

Qualificações

• Must have active TS/SCI with Full Scope Poly and U.S. citizenship.
• Experience providing information security for programs of similar scope and complexity.
• Familiarity with security documentation: SSPs, risk assessments, C&A packages, SRTMs.

Responsabilidades

• Support security policies, standards, and procedures.
• Assist in preparation and maintenance of security documentation.
• Maintain operational security posture for information systems.
• Provide CM for security software, hardware, and firmware.

Conhecimentos

Info security

RMF knowledge

Security compliance

Security monitoring

Formação académica

B.S. in Computer Science or related

DoD 8570 IAT Level I+

Ferramentas

Splunk

Descrição da oferta de emprego

TO BE CONSIDERED FOR THIS POSITION YOU MUST HAVE AN ACTIVE TS/SCI W/ FULL SCOPE POLYGRAPH SECURITY CLEARANCE (U.S. CITIZENSHIP REQUIRED)

The ISSO

• Supports information security
• Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system’s security posture.
• Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes.
• Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs.
• Supports system authorization under the NIST Risk Management Framework (RMF).
• Uses Splunk to monitor security events, analyze logs, and support incident response.

Five (5) years experience as an ISSO on programs and contracts of similar scope, type and complexity is required. Experience is to include at least one (1) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools. Bachelor’s degree in Computer Science or related discipline from an accredited college or university is required. DoD 8570 compliance with IAT Level I or higher is required. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.

Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards and methodologies

Assist with preparation and maintenance of documentation

Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information

Assist with the CM for information system security software, hardware and firmware

Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades

Propose, coordinate, implement and enforce information systems security policies, standards and methodologies

Develop and maintain documentation for C&A in accordance with ODNI and DoD policies

Provide CM for security-relevant information system software, hardware and firmware

Develop system security policy and ensures compliance

Evaluate security solutions to ensure they meet security requirements for processing classified information

Maintain operational security posture for an information system or program

Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system, program or enclave

Develop and update the system security plan and other IA documentation

Assist with the management of security aspects of the information system and perform day-to-day security operations of the system

Administer the user identification and authentication mechanism of the Information System (IS)Provides support for a program, organization, system or enclave’s information assurance program.

Description:

Provides support for proposing, coordinating, implementing and enforcing information systems security policies, standards and methodologies. Maintains operational security posture for an information system or program to ensure information systems security policies, standards and procedures are established and followed. Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware and firmware. Manages changes to system and assesses the security impact of those changes. Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages and System Requirements Traceability Matrices (SRTMs). Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).

Compensation:

We are committed to providing fair and competitive compensation. The salary range for this position is $78,000 to $250,000 per year. This range reflects the compensation offered across the locations where we hire. The exact salary will be determined based on the candidate's work location, specific role, skill set, and level of expertise.

Benefits:

• Health Coverage: Medical, dental, and vision insurance
• Additional Insurance: Basic Life/AD&D, Voluntary Life/AD&D, Short and Long-Term Disability, Accident, Critical Illness, Hospitalization Indemnity, and Pet Insurance
• Retirement Plan: 401(k) plan with company match
• Paid Time Off: Generous PTO, paid holidays, parental leave, and more
• Wellness: Access to wellness programs and mental health support
• Professional Development: Opportunities for growth, including tuition reimbursement
• Flexible work arrangements, including remote work options
• Flexible Spending Accounts (FSAs)
• Employee referral programs
• Bonus opportunities
• Technology allowance
• A diverse, inclusive, and supportive workplace culture

A diverse, inclusive, and supportive workplace culture