Information Assurance Specialist III (ISSO)
About The Position
ODRG is seeking an experienced Information Assurance Specialist to support five Information Management and Technology portfolios and protect the confidentiality, integrity, and availability of data across assigned DSCA systems. The role provides security expertise for traditional and cloud-native architectures in Amazon Web Services environments and approved Software as a Service solutions, integrating security throughout the system lifecycle and supporting cyber survivability. The position is based primarily in Mechanicsburg, Pennsylvania, with work also performed in Arlington, Virginia, as required. Duties requiring SIPR access must be completed onsite at an approved DSCA facility.
Requirements
- Active Secret clearance.
- Bachelor's degree in cybersecurity, information assurance, or a related field and at least 3 years of experience in RMF or system security; alternatively, at least 7 years of directly relevant experience without a degree.
- Understanding of DoW RMF, NIST 800-37, and security authorization.
- Experience evaluating security vulnerabilities on DoW networks.
- Experience performing ISSO or comparable information assurance and cybersecurity responsibilities.
- Knowledge of FedRAMP, DoW impact levels, and the DoW Cloud Computing Security Requirements Guide.
- Experience securing AWS environments, SaaS solutions, or comparable cloud architecture.
- Ability to interpret and apply security requirements across the system lifecycle.
Responsibilities
- Support cybersecurity activities across five IM&T portfolios and assigned DSCA information systems.
- Safeguard data stored on or transmitted through assigned systems.
- Provide security guidance for traditional environments, AWS cloud-native environments, and approved SaaS environments.
- Integrate security requirements and controls throughout the full system lifecycle.
- Assess DoW security requirements and support cyber survivability objectives.
- Perform ISSO duties in accordance with DoW and organizational policies and procedures and the Cloud Computing Security Requirements Guide.
- Monitor security compliance and support control validation, including identifying collected evidence and developing documentation.
- Maintain RMF artifacts and documentation.
- Coordinate POA&M activities and authorization packages.
- Complete duties requiring SIPR access onsite at an approved DSCA location.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
