Sr Information Systems Security Officer (ISSO), Advisor - TS/SCI w/poly

Peraton; Washington (District of Columbia); On-site; USD 150,000 - 195,000; Full time

Job summary

Peraton in Washington, DC seeks a Sr Information Systems Security Officer to support Federal Strategic Cyber programs. You will apply cybersecurity program standards, implement RMF, and develop security documentation.

The role requires 9+ years in CS/Cybersecurity with ISSO/ISSE at a cleared facility, DoD 8140.03 proficiency, and active TS/SCI with polygraph eligibility. Familiarity with Nessus, Splunk, and RMF processes is essential.

Qualifications

• Bachelor's degree in Computer Science, Business Management, or IT related discipline.
• Minimum of 9 years in CS or Cybersecurity with 7+ years as ISSO/ISSE at a cleared facility.
• Active TS/SCI clearance with ability to obtain a polygraph.
• Certification: CISSP, GISP, or CASP+/SecurityX or higher DoD 8140.03 proficiency.

Responsibilities

• Apply cybersecurity program standards, processes, procedures, and industry frameworks.
• Implement security controls per NIST SP 800-53 and SP 800-53A; develop SSP/SSPP artifacts.
• Use RMF v5 with RMF activities in eMASS; manage POA&Ms and risk.
• Collaborate with IT to communicate complex tech to non-technical audiences; coordinate STIG remediation.
• Conduct risk assessments and monitor security incidents; respond to threats.

Skills

Security frameworks

Risk Management

Communication

Security operations

Education

CISSP, GISP, or CASP+/SecurityX

DoD 8140.03 Work Role 722 proficiency

Master's or Doctorate in CS / Cybersecurity / IT

Tools

Tenable Nessus

Splunk

IBM Guardium

NMAP

Job description

Required Qualifications:

• Bachelor’s degree in Computer Science, Business Management, or IT related discipline.
• Minimum of 9 years of work experience in a Computer Science or Cybersecurity related field with at least 7 of those years serving as an Information Systems Security Officer (ISSO) or Information System Security Engineer at a cleared facility.
• Must have at least 1 of the following certifications:
  • CISSP, GISP, or CASP+/SecurityX
• Must meet DoD 8140.03 Advanced proficiency aligned to Information Systems Security Manager (Work Role 722).
  • Must meet DoD 8140.03 Advanced proficiency aligned to Information Systems Security Manager (Work Role 722). Must have at least 1 of the following certifications or advanced degrees listed below:
    • CISM - Certified Information Security Manager
    • CISSP - Certified Information Systems Security Professional
    • CISSP-ISSMP - Certified Information Systems Security Professional - Information Systems Security Management Professional
    • FITSP-M - Federal IT Security Professional-Manager-NG
    • GCIA - GIAC Certified Intrusion Analyst
    • GCIH - GIAC Certifed Incident Handler
    • GICSP - Global Industrial Cyber Security Professional
    • GSLC - GIAC Security Leadership Certification
    • Doctorate - Computer Science
    • Doctorate - Cybersecurity
    • Doctorate - Data Science
    • Doctorate - Information Systems
    • Doctorate - Information Technology
    • Doctorate - Software Engineering
    • Master of Science - Strategic Information and Cyberspace Studies (NDU CIC)
    • Masters - Computer Science
    • Masters - Cybersecurity
    • Masters - Data Science
    • Masters - Information Systems
    • Masters - Information Technology
    • Masters - Software Engineering
• Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), and/or similar applications.
• Active TS/SCI security clearance with the ability to obtain a polygraph.

Job Description:

Peraton is seeking an Sr Information Systems Security Officerto support our Federal Strategic Cyber programs.

Location: Washington, DC

In this role, you will:

• Apply best practices for cybersecurity program standards, processes, procedures, and industry-standard security frameworks.
• Implement and assess security controls in accordance with NIST SP 800-53, NIST SP 800-53A requirements and guidance.
• Develop security policies and procedures, CSS, SSP, SSPP, and assess ATO package artifacts.
• Apply expert knowledge of Risk Management Framework (RMF) v5 processes and workflows.
• Use eMASS to execute RMF v5 activities, document and update system status, identify and manage operational and technical security controls, assess implementation and risk, manage non-compliant and non-validated controls, manage POA&Ms from entry through closeout, produce reports, and track POA&M due dates.
• Complete checklists to ensure Security Authorization Process documentation is complete and complies with applicable guidance.
• Collaborate with IT counterparts, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers.
• Conduct risk assessments, monitor security incidents, and respond appropriately to security threats.
• Apply knowledge of network technologies and protocols, TCP/IP, operating systems, security protocols, system architecture and data flows, security categorization, requirements, configuration management processes, firewalls and configurations, intrusion detection and prevention systems, encryption techniques, Windows, Unix, Linux, databases, web servers, and other applications.

#FederalCyberISaaS