Senior ISSO II: RMF, ATO & Security Architecture

Reflexive Concepts, LLC; Hanover (MD); Vor Ort; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

Reflexive Concepts, LLC is seeking a skilled Information System Security Officer II to join our growing team in Hanover, MD. You will own security documentation, accreditation packages, continuous monitoring, and related RMF activities, working closely with the ISSM, DAOs, developers, and system administrators.

Responsibilities include preparing SSPs, incorporating RMF artifacts, maintaining accreditation, and ensuring timely C&A submissions.

Qualifikationen

• Ten years of relevant work experience, including at least four years as an ISSO.
• Bachelor's degree in a technical discipline; an additional four years of experience may substitute for the degree.

Aufgaben

• Prepare the SSP and help obtain ATOs.
• Incorporate RMF artifacts (architecture, boundaries, risk assessments, POA&Ms, data flows).
• Work with ISSM and DAOs to maintain accreditation.
• Verify package submissions meet approval thresholds (C&A, SAR findings, POA&Ms, SSPs).
• Apply continuous monitoring to evaluate security posture.
• Create tasks for developers and sysadmins; oversee patch deployments.
• Enforce information systems security policies and methodologies.
• Use vulnerability tools (ACAS/Nessus) to document compliance.
• Review audit logs weekly.
• Perform weekly data transfers Hanover to Fort Meade.
• Maintain and report assessment and authorization statuses.
• Support PRIVAC requests and extensions.

Kenntnisse

Communication skills

Team collaboration

Clear status updates

Ausbildung

Bachelor's degree in technical discipline

14 years total experience alternative to degree

Tools

Jira

Redmine

ServiceNow

Jobbeschreibung

Reflexive Concepts, LLC is seeking a skilled Information System Security Officer II to join our growing team in Hanover, MD. You will own security documentation, accreditation packages, continuous monitoring, and related RMF activities, working closely with the ISSM, DAOs, developers, and system administrators.

Responsibilities include preparing SSPs, incorporating RMF artifacts, maintaining accreditation, and ensuring timely C&A submissions.