Mid-Level Information System Security Officer (ISSO)

Integration Innovation, Inc.; Huntsville (AL); Sur place; USD 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Excellent insurance coverage

401(k) match

Generous PTO

Health and wellness incentives

Tuition and certification reimburse

i3 Cares

Résumé du poste

i3 is seeking a Mid-Level ISSO to support the RMF lifecycle for a DoD SDN environment. The role involves daily cybersecurity operations, RMF processes, vulnerability management, and continuous monitoring while coordinating with technical teams and leadership to maintain the system's authorization and posture.

Qualified candidates will have DoD RMF experience, current Security+ (or equivalent), and the ability to maintain eMASS documentation; DoD 8140/167 certifications are preferred.

Qualifications

• Bachelor's degree in a related field; relevant experience may be substituted for degree.

Responsabilités

• Support RMF and ATO sustainment lifecycle for the system.
• Maintain eMASS authorization packages and security artifacts.
• Develop and track POA&Ms and coordinate remediation of findings.
• Review CTOs, vulnerability notifications, and cybersecurity directives.
• Coordinate with tenants and teams to communicate cybersecurity requirements and validate compliance.
• Support risk assessments for new applications and architecture changes.
• Develop RMF documentation (SSPs, RARs, continuous monitoring).
• Monitor DoD/NIST guidance and assist with Zero Trust/PQC implementation.
• Participate in cybersecurity assessments, inspections, and CM activities.

Connaissances

RMF lifecycle

eMASS

ACAS/Nessus

DISA STIGs

POA&Ms

NIST SP 800-53

CNSSI 1253

Zero Trust

Post-Quantum Cryptography

Vulnerability remediation

Cybersecurity coordination

Formation

Bachelor's degree in a related field

Outils

eMASS

ACAS/Nessus

DISA STIGs

POA&Ms

NIST guidelines

Elastic

Description du poste

i3 is seeking a Mid-Level Information System Security Officer (ISSO) to support the Risk Management Framework (RMF) lifecycle for a Software Defined Network (SDN) supporting PAE Fires and Reveille Forge. The selected candidate will perform day-to-day cybersecurity, RMF, vulnerability management, and continuous monitoring activities while coordinating with technical teams, external tenants, and cybersecurity leadership to maintain the system's authorization and security posture.

• Support implementation and sustainment of the DoD Risk Management Framework (RMF) and system Authorization to Operate (ATO).
• Maintain eMASS authorization packages, including ACAS/Nessus results, DISA STIG checklists, security controls, and supporting artifacts.
• Develop, track, and maintain POA&Ms and coordinate remediation of identified vulnerabilities and compliance findings.
• Review applicable USCYBERCOM Cyber Tasking Orders (CTOs), DISA vulnerability notifications, and other cybersecurity directives for system and tenant applicability.
• Coordinate with external tenants and technical teams to communicate cybersecurity requirements, track remediation activities, and validate compliance.
• Support risk assessments for new applications, hardware, system changes, external connections, and architecture enhancements.
• Develop and maintain RMF documentation, including SSPs, RARs, continuous monitoring documentation, and interconnection agreements (ISAs/MOUs).
• Monitor applicable Federal, DoD, and NIST cybersecurity guidance and support implementation of evolving requirements, including Zero Trust and Post-Quantum Cryptography (PQC).
• Support cybersecurity assessments, inspections, configuration management activities, and other continuous monitoring requirements.
• Bachelor's degree in a related field; relevant experience may be substituted in lieu of a degree.
• 3-6 years of cybersecurity, ISSO, information assurance, or security analyst experience supporting a DoD RMF environment.
• Current certification or qualification meeting applicable DoD 8140 requirements; Security+ or equivalent preferred.
• Experience maintaining authorization packages and supporting ATO sustainment activities in eMASS.
• Working knowledge of ACAS/Nessus, DISA STIGs, POA&Ms, NIST SP 800-53, DoD RMF, and CNSSI 1253.
• Familiarity with security monitoring/SIEM technologies such as Elastic is preferred.
• Active DoD SECRET security clearance.
• U.S. Citizenship required.
• Strong communication skills and ability to coordinate cybersecurity requirements with technical teams, leadership, and external organizations.

Knowledge/Skills

• Knowledge of office administration and procedures.
• Exceptional judgment capabilities and relationship management skills.
• Excellent communication, teamwork, and client service skills; ability to clearly communicate in discussions and written documents, and to deliver feedback clearly and tactfully.
• Interact with a diverse array of customers and staff in a professional and courteous manner.
• Work independently with accountability for accurate and complete results.
• Be extremely organized and exceptionally detail oriented.
• Work well both independently and in a team environment.
• Be energized by a fast-paced work environment.
• Must be able to communicate with others effectively.
• Analyze information and respond appropriately.Manage time wisely and prioritize tasks.
• Provide superior customer service.
• Multi-task in a pleasant manner.
• Work well under pressure.

PHYSICAL DEMANDS

• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
• While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; handle or feel; and reach with hands and arms.
• The employee is occasionally required to sit; climb or balance; and stoop, kneel, crouch or crawl. The employee must be able to lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.
• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus.
• Regular i3 hours are 800 a.m. - 500 p.m. Monday-Friday, however, additional hours may be required on occasion. Regular and punctual attendance is required.

i3 is a technically diverse, 100% team member owned business, headquartered in Huntsville, Alabama specializing in missile and aviation systems engineering and logistic services, electronic warfare and electromagnetic effects analysis, UAS system integration and flight operations, full lifecycle C5ISR engineering services, cybersecurity and IT/IA innovative solutions and virtual training, simulation & serious game development and implementation. We have established a broad offering of products and capabilities collectively providing decades of experience supporting the full complement of DoD military services, Missile Defense Agency, National Aeronautics and Space Administration, and a variety of other Government organizations and private industry customers.

Perks of being a team member owner include

• Long-term financial security
• Higher job satisfaction
• Greater job security
• Personal and professional growth
• Great company culture

Other outstanding benefits

• Excellent insurance coverage
• 401(k) match
• Generous PTO
• Health and wellness incentives
• Tuition and certification reimbursement
• Countless opportunities to give back to the community through i3 Cares

We work hard. We compete hard. We play hard.