ISSO (TS Required)

COLSA Corporation•Huntsville, AL

About The Position

COLSA is currently seeking TS cleared personnel who possess immediate eligibility for SCI who want to continue a Cybersecurity career in Huntsville, AL, in support of the Defense Intelligence Agency (DIA) Missile Space and Intelligence Center (MSIC). This position is for an Information System Security Officer (ISSO) that specializes in the DoD implementation of Risk Management Framework (RMF) policies, processes, and procedures in support of software development solutions. At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here .

Requirements

TS cleared personnel
Immediate eligibility for SCI
Specializes in the DoD implementation of Risk Management Framework (RMF) policies, processes, and procedures in support of software development solutions.

Responsibilities

Provide RMF program support required to obtain, support, and maintain Authority to Operate (ATO) approvals for MSIC IT systems, applications, and networks.
Prepare and deliver the documentation, technical data, and computer data needed for the submission of Enterprise Mission Assurance Support Service (eMASS) documentation in support of RMF activities.
Control connections and access to eMASS, including user accounts and privileges, in accordance with MSIC policies.
Manage and complete eMASS records for each system and manage those through the RMF process.
Work with the technical security team to identify, fix, and provide information regarding resolving vulnerabilities, configuration settings, and computer incidents.
Monitor the network and supporting systems to detect security compromise events (including intrusions and virus incidents).
Provide standard support for processes, investigations, and maintenance of system accreditation.
Identify where systems/networks deviate from acceptable configurations, enclave policy, or local policy.
Provide recommendations for protecting networks, workstations, servers, and IT assets.
Involved in conducting audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices.
Support the formal testing requirements through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
Involved in passive evaluations (compliance audits) and/or active evaluations (vulnerability assessments).