ATO ISSO

SAIC • Honolulu, HI

3d

About The Position

SAIC is seeking an ATO ISSO to support USPACOM documenting security controls and creating Authority to Operate (ATO) packages.

Requirements

• Bachelors and fourteen (14)+ years of related experience; additional four (4) years of experience considered in lieu of degree.
• Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments.
• Experience using Government, Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, etc.)
• Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents.
• Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented.
• Familiar with Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG).
• Understanding of the DOD requirements for Network Topology, System Security Boundary, and Data Flow Diagrams.
• Must have a current DoD IAM Level I or higher certification (i.e. Security+ CE, Cloud+, CASP+, OR CISSP etc.)
• Must have a current Active Secret Clearance with the ability to obtain a TS/SCI Clearance.
• Must be a current US Citizen.

Responsibilities

• Documenting security controls in SSP per NIST SP 800-53A rev4.
• Create Authority to Operate (ATO) packages.
• Validate vulnerability/risk assessment analysis to support accreditation.
• Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches.
• Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation.
• Review completion and implementation of system additions and enhancements and make recommendations to management.
• Determine system specifications, input/output processes, and working parameters for hardware and software compatibility.
• Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior