Principal Cyber Security Compliance Engineer (ISSO)

Owl Cyber Defense Solutions, LLC; Fort Meade (MD); On-site; USD 165,000 - 185,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan with company match

Paid time off

Job summary

Owl Cyber Defense Solutions, LLC is seeking a Principal Cybersecurity Compliance Engineer (ISSO) to lead RMF-based accreditation efforts for government clients. You will tailor SCTMs and coordinate with government ISSMs to prepare ATO packages.

Responsibilities include creating and reviewing CONOPS, SSPs, POA&Ms, and related artifacts, facilitating on-site ATO activities, and guiding cross-domain engineers on security control responses.

Qualifications

• Bachelor’s degree in a related field (System/Electrical/CS).
• 15+ years RMF security engineering experience.
• Ability to interpret NIST 800-53, ICD-503, DoD 8510.01 guidance.

Responsibilities

• Liaise on Accreditation activities and brief government ISSMs and stakeholders.
• Create and manage ATO artifacts (CONOPS, SSTP, SSP, POA&M, SCTM).
• Lead on-site ATO processes at Owl customer sites.
• Document security control responses with cross-domain engineers.

Skills

RMF Security Engineering

NIST 800-53

DoD 8510.01

Risk Management

Communication with AO

Education

Bachelor’s Degree in System Engineering / Electrical Engineering / Computer Science

Tools

XACTA

eMass

SCAP/OVAL

ACAS

Job description

Principal Cyber Security Compliance Engineer (ISSO)

• Ft. Meade, MD
• Information Technology

Job Title: Principal Cybersecurity Compliance Engineer (ISSO)

Department: Federal Installation and Support

Reports to: Director, Installation and Support

Office: Columbia, MD

Work Location: On Site - Ft Meade, MD

Job Title: Principal Cybersecurity Compliance Engineer (ISSO) Department: Federal Installation and Support Reports to: Director, Installation and Support Office: Columbia, MD Work Location: On Site - Ft Meade, MD

Owl Cyber Defense is a leader and trusted partner in cyber security. We deliver solutions that protect and connect the world’s most critical networks. Owl’s product lines of cross domain, data diode, and portable media solutions provide the strongest available security checkpoints for threat prevention and secure data availability. Our in-depth expertise in security engineering at the operating system level enables us to help government and commercial customers meet ever-evolving cyber security threats.

Job Summary:

The ISSO will create, and tailor Security Control Traceability Matrices (SCTM) based on the Risk Management Framework (RMF) guidance, NIST 800-53, ICD 503, and CNSSI 1253. Exposure to Cross Domain Solution (CDS) accreditation and the National Cross Domain Strategy and Management Office (NCDSMO) Raise the Bar (RTB) initiative is required. Experience creating artifacts supporting the RMF accreditation process is required.

Essential Duties and Responsibilities:

• Serves as the primary technical liaison for Accreditation activities, leading and conducting Accreditation-related briefings for government ISSMs and senior customer stakeholders. Prepare support briefings for ATO packages statuses
• Facilitate XACTA and eMass data entry at Owl customer sites by creating Authorization to Operate packages for Authorization Official approval to include:
  • CONOPS
  • SSTP
  • SSP
  • POA&M
  • Self-Assessment Plan
  • Cyber Threat Security Plan
  • SCTM
• Facilitate the ATO process on-site with Owl customers
• Interface with Cross Domain engineers to document security control responses within required documentation

Requirements/Qualifications:

• Education
  • Bachelor’s Degree in System Engineering, Electrical Engineering, Computer Science, or a computer/software engineering related field.
• Experience
  • Minimum of 15+ years of experience in RMF Security Engineering
• Knowledge, Skills & Abilities
  • Ability to understand, interpret and make recommendations based on relevant publications (e.g., NIST 800-53, ICD-503 and DoD 8510.01)
  • Requirement Definition and Analysis, System Security Architecture
  • NCDSMO standards and guidance documents regarding CDS architecture, design, development, engineering, implementation, system security, local and remote management and monitoring, and filtering.
  • Leadership experience in utilizing Risk Management Framework to drive the end-to-end accreditation process including negotiating with the Authorizing Official (AO) to achieve an Authorization to Operate (ATO)
  • Linux Operating Systems including open-source distributions, SELinux policy and embedded systems
  • Security Technical Implementation Guide development and modification, and STIG remediation
  • SCAP/OVAL and ACAS scanning and thorough understanding of the framework
  • Previous Common Criteria
  • Trusted Computing
  • Penetration testing
  • Test and Evaluation (T&E) and Independent Verification and Validation (IV&V)
• Additional Competencies/Requirements
  • Candidates must hold current TS/SCI clearance.
  • Required Certifications: DoD 8570 IAT/IAM Level III certification
  • Familiarity with XACTA/TSABI process for the IC and the SABI process for DOD.
  • Candidates must be able to commute regularly (M-F) to customer sites in the local area.
  • Ability to travel outside of the local area, up to 30% annually, is required.

Salary:

The salary for this position ranges between $165,000.00 and $185,000.00 USD. This range represents Owl Cyber Defense Solutions' good-faith estimate of the base salary for this position at the time of posting. Placement within the range will depend on factors such as relevant work experience, geographic location, education, training, certifications, key skills, internal equity, market data, and other job-related considerations. Compensation will not be below any applicable local minimum wage. This position is also eligible to participate in the Company's annual bonus program, subject to the terms and conditions of the applicable plan.

Benefits:

Owl offers a comprehensive and competitive benefits package designed to support the health, financial security, and wellbeing of our employees and their families. Our benefits include medical, dental, and vision coverage, a 401(k) retirement plan with company match, generous paid time off, company-paid life insurance, and company-paid short- and long-term disability insurance. Employees may also choose from a variety of voluntary benefits and wellness programs. Specific benefit plan details, employee contribution rates, eligibility requirements, and other program information will be shared during the hiring process.

About Owl Cyber Defense Solutions, LLC

Owl Cyber Defense Solutions, LLC is a fast-growing cybersecurity solutions company, holding a firm leadership position in network security and secure information transfer. It is a privately-owned US company with offices in Columbia, MD, Danbury, CT and Morrisville, NC. For more information, see https://www.owlcyberdefense.com .

Owl Cyber Defense is an Equal Opportunity Employer and complies with all applicable federal employment laws and regulations. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.