Sr Information Systems Security Officer (ISSO), Advisor - TS/SCI w/poly

Peraton; Winchester (VA); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Paid holidays

Job summary

Peraton is seeking a Sr Information Systems Security Officer to support Federal Strategic Cyber programs in Winchester, VA. The role focuses on applying cybersecurity standards, implementing RMF v5 controls, and coordinating with IT teams.

A TS/SCI clearance is required. The candidate should have 9+ years in CS or Cybersecurity with 7+ years as ISSO/ISSE, and possess relevant certifications such as CISSP, GISP, or CASP+/SecurityX.

Qualifications

• Bachelor’s degree in Computer Science, Business Management, or IT related discipline.
• Minimum of 9 years of work experience in CS or Cybersecurity with at least 7 years as ISSO/ISSE at a cleared facility.
• Must have at least 1 of CISSP, GISP, or CASP+/SecurityX.
• Must meet DoD 8140.03 Advanced proficiency aligned to ISSM (Work Role 722).
• Active TS/SCI security clearance with the ability to obtain a polygraph.
• Familiarity with security tools including Nessus, Splunk, Guardium, NMAP, etc.

Responsibilities

• Apply best practices for cybersecurity program standards, processes, procedures, and industry-standard security frameworks.
• Implement and assess security controls per RMF v5 and NIST SP 800-53/800-53A.
• Develop security policies and procedures and assess ATO package artifacts.
• Use eMASS to execute RMF v5 activities and manage POA&Ms.
• Collaborate with IT counterparts and communicate complex technical information to non-technical audiences.
• Conduct risk assessments, monitor security incidents, and respond to threats.

Skills

Bachelor's degree in Computer Science,

Business Management

IT related discipline

9+ years in CS or Cybersecurity

ISSO/ISSE at cleared facility

CISSP

GISP

CASP+/SecurityX

RMF v5

eMASS RMF activities

NIST SP 800-53/800-53A

STIG remediation coordination

Network technologies and protocols (e2

Windows/Unix/Linux

Education

Bachelor's degree in Computer Science, Business Management, or IT related discipline

Doctorate - Computer Science

Doctorate - Cybersecurity

Master of Science - Strategic Information and Cyberspace Studies

Masters - Computer Science

Masters - Cybersecurity

Masters - Data Science

Masters - Information Systems

Masters - Information Technology

Masters - Software Engineering

Tools

Tenable Nessus

Security Center

Splunk

IBM Guardium

HP Web Inspect

NMAP

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

Peraton is seeking an Sr Information Systems Security Officer to support our Federal Strategic Cyber programs.

Location: Winchester, VA

In this role, you will:

• Apply best practices for cybersecurity program standards, processes, procedures, and industry-standard security frameworks.


• Implement and assess security controls in accordance with NIST SP 800-53, NIST SP 800-53A requirements and guidance.


• Develop security policies and procedures, CSS, SSP, SSPP, and assess ATO package artifacts.


• Apply expert knowledge of Risk Management Framework (RMF) v5 processes and workflows.


• Use eMASS to execute RMF v5 activities, document and update system status, identify and manage operational and technical security controls, assess implementation and risk, manage non-compliant and non-validated controls, manage POA&Ms from entry through closeout, produce reports, and track POA&M due dates.


• Complete checklists to ensure Security Authorization Process documentation is complete and complies with applicable guidance.


• Collaborate with IT counterparts, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers.


• Conduct risk assessments, monitor security incidents, and respond appropriately to security threats.


• Apply knowledge of network technologies and protocols, TCP/IP, operating systems, security protocols, system architecture and data flows, security categorization, requirements, configuration management processes, firewalls and configurations, intrusion detection and prevention systems, encryption techniques, Windows, Unix, Linux, databases, web servers, and other applications.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Business Management, or IT related discipline.


• Minimum of 9 years of work experience in a Computer Science or Cybersecurity related field with at least 7 of those years serving as an Information Systems Security Officer (ISSO) or Information System Security Engineer at a cleared facility.


• Must have at least 1 of the following certifications:




• CISSP, GISP, or CASP+/SecurityX




• Must meet DoD 8140.03 Advanced proficiency aligned to Information Systems Security Manager (Work Role 722). Must have at least 1 of the following certifications or advanced degrees listed below:




• CISM - Certified Information Security Manager


• CISSP - Certified Information Systems Security Professional


• CISSP-ISSMP - Certified Information Systems Security Professional - Information Systems Security Management Professional


• FITSP-M - Federal IT Security Professional-Manager-NG


• GCIA - GIAC Certified Intrusion Analyst


• GCIH - GIAC Certified Incident Handler


• GICSP - Global Industrial Cyber Security Professional


• GSLC - GIAC Security Leadership Certification


• Doctorate - Computer Science


• Doctorate - Cybersecurity


• Doctorate - Data Science


• Doctorate - Information Systems


• Doctorate - Information Technology


• Doctorate - Software Engineering


• Master of Science - Strategic Information and Cyberspace Studies (NDU CIC)


• Masters - Computer Science


• Masters - Cybersecurity


• Masters - Data Science


• Masters - Information Systems


• Masters - Information Technology


• Masters - Software Engineering




• Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), and/or similar applications.


• Active TS/SCI security clearance with the ability to obtain a polygraph.

Details

Target Salary Range: $146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.