Senior ISSO - DoD RMF & Cybersecurity Lead (On-Site MD)

ASEC; Lexington Park (MD); In loco; USD 125.000 - 140.000; Tempo pieno

Vantaggi offerti da questo lavoro

Employee ownership (ESOP)

401(k) with company match

Tuition assistance

Comprehensive benefits

Descrizione del lavoro

ASEC’s Information Systems Security Officer role is based at our Lexington Park, MD office, with up to 10% travel. You will support RMF assessments, maintain SSPs, and coordinate with DoD cyber staff to ensure compliance and authorization. You will develop evidence for eMASS, perform vulnerability reviews with ACAS/STIGs, and track POA&Ms while guiding remediation with IT teams.

A TS clearance is required. Required are a BS in a cybersecurity/IT field, 5+ years of IA experience, and hands-on DoD

Competenze

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical field.
• At least 5 years of IA/Cybersecurity experience is preferred.
• Experience supporting cybersecurity compliance, vulnerability management, or assessment and authorization activities for DoD information systems.
• Working knowledge of RMF, NIST SP 800-53 security controls, and DoD cybersecurity requirements.
• Experience developing and maintaining authorization documentation, security control evidence, and POA&Ms.
• Experience using ACAS, DISA STIGs, and SCAP tools to assess system security and support vulnerability remediation.
• Familiarity with eMASS or comparable cybersecurity assessment and authorization repositories.
• Working knowledge of Windows and Linux operating systems, networking fundamentals, access controls, and system hardening.

Mansioni

• Support RMF activities throughout the system lifecycle, including security control implementation, assessment preparation, authorization, and continuous monitoring.
• Develop, update, and maintain cybersecurity documentation, including SSPs, control implementation statements, supporting evidence, and authorization artifacts.
• Maintain system security records and authorization documentation in eMASS or other Government-designated repositories.
• Coordinate with technical teams to maintain inventories, boundary descriptions, network diagrams, and configuration baselines.
• Perform and review vulnerability assessments using ACAS, STIGs, and SCAP.
• Evaluate scan results and STIG findings, coordinate remediation, and validate corrective actions.
• Develop and maintain POA&Ms, track remediation progress, and prepare mitigation statements for Government review.
• Monitor compliance with cybersecurity policies and configurations; review changes for cybersecurity impacts.
• Coordinate cybersecurity requirements for system installations, upgrades, integration, and deployments.
• Review security logs and monitoring information and coordinate follow-up actions.
• Report suspected cybersecurity incidents and assist with evidence collection and corrective actions.
• Support inspections, security control assessments, and authorization reviews by organizing evidence and tracking follow-up.
• Up to 10% travel will be expected.

Conoscenze

RMF

NIST SP 800-53

ACAS

STIGs

eMASS

Windows

Linux

Vulnerability Management

Coordination

Formazione

Bachelor’s degree in Cybersecurity/IT/CS/IS/related field

Strumenti

ACAS

DISA STIGs

SCAP

eMASS

Descrizione del lavoro

ASEC’s Information Systems Security Officer role is based at our Lexington Park, MD office, with up to 10% travel. You will support RMF assessments, maintain SSPs, and coordinate with DoD cyber staff to ensure compliance and authorization. You will develop evidence for eMASS, perform vulnerability reviews with ACAS/STIGs, and track POA&Ms while guiding remediation with IT teams.

A TS clearance is required. Required are a BS in a cybersecurity/IT field, 5+ years of IA experience, and hands-on DoD