Journeyman Information Security Systems Manager

RiseMe; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Avion Solutions Inc. in Huntsville, AL seeks a Journeyman Information Security Systems Manager to support DoD RMF processes and A&A activities for data processing and tactical systems.

The role requires DoD 8140 ISSM-Basic certification, RMF/NIST knowledge, and experience with tools like ACAS, Nessus, and eMASS. Travel up to 15% and U.S. citizenship are required.

Qualifications

• Meet DoD 8140 ISSM-Basic certification, education, and experience compliance.
• Associate's degree (Engineering, IT, or Cyber-related field).
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs, and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls.
• Knowledge of information system architecture and standards as they apply to cybersecurity.
• Knowledge of NIST SP 800-160, Systems Security Engineering.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Ability to work with system developers to update, maintain, and track RMF and POA&M documentation.
• Must be a U.S. citizen and have the ability to obtain/maintain a DoD security clearance.
• Must be able to travel up to 15% of the time. US travel only.

Responsibilities

• The candidate will be a key member of a team performing Hardware and Software Cybersecurity analysis, along with key functions supporting the RMF Assessment and Authorization (A&A) process for data processing, test, and tactical systems.
• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and document the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Select and assess security controls, complete accreditation packages, formulate and implement mitigations, and maintain the security posture of systems.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system’s lifecycle.
• Validate system security requirements and formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing, and coordinating).
• Document preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitor and evaluate a system's compliance with DoD security, resilience, and dependability requirements, including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.
• Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Skills

RMF knowledge

NIST security controls

DoD 8140 ISSM-Basic certification

IAVMs

Cybersecurity assessment tools

Education

Associate's degree in Engineering/IT/Cyber-related field

Bachelor’s degree in Engineering/IT/Cyber-related field (preferred)

Tools

ACAS

Nessus

SCC

STIG Viewer

eMASS

Job description

Avion Solutions Inc., a 100% employee-owned company, seeks candidates for a Journeyman Information Security Systems Manager to support PAE Fires. This position is based in Huntsville, AL.

Job Responsibilities/Duties:

• The candidate will be a key member of a team performing Hardware and Software Cybersecurity analysis, along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems.

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and document the security posture, capabilities, and vulnerabilities against applicable NIST controls.

• Select and assess security controls, complete accreditation packages, formulate and implement mitigations, and maintain the security posture of systems.

• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system’s lifecycle.

• Validate system security requirements and formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing, and coordinating).

• Document preliminary or residual security risks for system operation and manage and approve Authorization Packages.

• Monitor and evaluate a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements, including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.

• Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Required Experience:

• Meet DoD 8140 ISSM-Basic certification, education, and experience compliance.

• Associate's degree (Engineering, IT, or Cyber-related field).

• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs, and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).

• Knowledge of the Risk Management Framework (RMF) process and NIST security controls.

• Knowledge of information system architecture and standards as they apply to cybersecurity.

• Knowledge of NIST SP 800-160, Systems Security Engineering.

• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.

• Ability to work with system developers to update, maintain, and track RMF and POA&M documentation.

• Must be a U.S. citizen and have the ability to obtain/maintain a DoD security clearance.

• Must be able to travel up to 15% of the time. US travel only.

Preferred Qualifications:

• Bachelor’s Degree (Engineering, IT, or Cyber-related field).

• Strong desire to contribute to overall team success.

• Excellent written and oral communication skills.

• High degree of proficiency in MS Office Suite.

Equal Opportunity:

Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor who affords equal employment opportunity to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin or any other reason prohibited by law.