Associate Information System Security Officer (ISSO)

Moog•Buffalo, NY

3d•Onsite

About The Position

Moog is looking for an Associate Information Systems Security Officer (ISSO) to support the Information Security Manager in the operation, accreditation, maintenance, and auditing of Information Systems (IS) used to process classified information and ensure the operational security posture is maintained in accordance with the system security plans and governing policies (i.e. - DCSA Assessment and Authorization Process Manual – DAAPM and National Industrial Security Program Operating Manual – NISPOM Rule - 32 CFR part 117). This role sits at our headquarters in East Aurora, NY and has a on-site work schedule.

Requirements

A bachelor’s degree in information technology, Computer Information Systems, or related field is preferred.
Minimum of three (3) years’ experience in Information Assurance.
Knowledge of policies such as DAAPM, NISPOM Rule, JSIG, ICD 503, RMF, and NIST Special Publications.
Proficiency with using vulnerability scanning, auditing, SIEM, DLP, and hardening tools such as Nessus, SCAP Compliance Checker (SCC), USB Device Control, STIGs, Windows GPOs (importing, testing, implementing, modifying, exporting), and PowerShell scripts for automated and routine tasks.
Proficiency with performing data transfers and knowledge of data transfer procedures.
Appropriate US Security Clearance (Secret/Top Secret) or be able to meet the requirements to attain and maintain a clearance.

Nice To Haves

COMSEC-related experience is a plus.

Responsibilities

Prepare, update, and maintain Risk Management Framework (RMF) documentation such as, but not limited to, Authorization to Operate (ATO) packages, System Security Plans (SSP), Risk Assessment Reports (RAR), Standard Operating Processes (SOP), and Plan of Actions and Milestones (POA&Ms) for all classified networks and systems.
Assist in the performance of regular auditing, updating, and continuous monitoring of the bootable Information Systems (IS) to ensure the security controls are implemented & maintained in accordance with RMF/ATO.
Assist in maintaining complete inventory of IS including software and peripheral hardware.
Assist Data Transfer Agents (DTA) and Facility Security Officer (FSO) to perform file transfers using removable media in accordance with the Assured File Transfer (AFT) policy and procedures.
Coordinate with the ISSM, the Security Control Assessor (SCA), and the Authorizing Official (AO) for all Configuration Management (CM) changes and modifications to the IS software and hardware.
Identify and assess device classification risks and determine appropriate risk mitigation safeguards to maintain security posture.
Assist in the scheduling, performing, and maintaining records of required IS auditing, patching, maintenance, configuration management changes, and scanning based on evolving threat/vulnerabilities and customer compliance requirements.
Work with System Administrators (SA) in configuring and maintaining IT components and infrastructure to comply with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and DoD cyber security requirements.
Ensure ISs are operated, maintained, and properly disposed of in accordance with security policies and procedures.