ISSO II: Cybersecurity & RMF Lead (TS/SCI)

Amentum company; Northern (KY); Hybrid; USD 160,000 - 210,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

Job summary

Amentum seeks an Information Systems Security Officer (ISSO) 2 for a new prime contract based out of the Maryland office. The role provides support for information assurance programs, develops documentation, and enforces security policies and RMF requirements.

Strong experience with DoD/ODNI policies, CM, and security authorization is expected. Qualified candidates hold DoD 8570.01-M IAM Level I or higher and a current TS/SCI with Poly clearance.

Qualifications

• Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards, and methodologies
• Assist with preparation and maintenance of documentation
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information
• Assist with Configuration Management (CM) for information system security software, hardware, and firmware
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades
• Propose, coordinate, and implement information systems security policies, standards, and methodologies
• Develop and maintain documentation for Security Authorization in accordance with ODNI and DoD policies
• Provide CM for security-relevant information system software, hardware, and firmware
• Ensure compliance with system security policy
• Evaluate security solutions to ensure they meet security requirements for processing classified information
• Maintain operational security posture for an information system or program
• Provide support to the information System Security Manager (ISSM) for maintaining the appropriate operational Cybersecurity posture for a system, program, or enclave
• Develop and update the system security plan and other Cybersecurity documentation
• Assist with the management of security aspects of the information system and perform day-to day security operations of the system
• Track and ensure appropriate user identification and authentication mechanism of the information System (IS)
• Obtain system authorization for ISs under their purview
• Provide support for a program, organization, system, or enclave's information assurance program
• Plan and coordinate implementation of IT security programs and policies
• Manage and control changes to the system assessing the security impact of those changes
• Provide daily oversight and direction to contractor ISSOs
• Interact with customers, IT staff, and high-level corporate officers to define and achieve required Cybersecurity objectives

Responsibilities

• Provide support for a program, organization, system, or enclave's information assurance program.
• Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
• Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
• Assist with the management of security aspects of the information system and perform day-to-day security operations of the system.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Perform vulnerability/risk assessment analysis to support security authorization.
• Provide configuration management (CM) for information systems security software, hardware, and firmware.
• Manage changes to system and assess the security impact of those changes.
• Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).

Job description

Amentum seeks an Information Systems Security Officer (ISSO) 2 for a new prime contract based out of the Maryland office. The role provides support for information assurance programs, develops documentation, and enforces security policies and RMF requirements.

Strong experience with DoD/ODNI policies, CM, and security authorization is expected. Qualified candidates hold DoD 8570.01-M IAM Level I or higher and a current TS/SCI with Poly clearance.