Information System Security Officer (ISSO)

Peraton•Annapolis Junction, MD

20h•$112,000 - $179,000

About The Position

Peraton is seeking an Information System Security Officer (ISSO) to work on a large-scale enterprise Information Technology (IT) program. This role will work closely with the team to monitor, assess, and maintain the security controls, ensuring that systems meet the necessary security requirements as outlined in the Risk Management Framework (RMF).

Requirements

5 years with BS/BA; Four Years work experience will be considered in lieu of a Bachelors degree
Minimum 5 years’ experience in security engineering of Information Systems
Top Secret clearance with SCI eligibility required
Proven ISSO experience across a large-scale enterprise Information Technology (IT) program
Familiar with Scrum methodologies
Must have a current DoD 8570.1-M IAT Level II certification (i.e., Security+ CE)

Nice To Haves

ITILv4 Foundation Certification desired
Experience with ServiceNow

Responsibilities

Assist in the development and maintenance of RMF documentation and artifacts, ensuring proper security controls and safeguards are implemented for all systems.
Collaborate with the ISSE and other engineering teams to assess and integrate security controls, providing security guidance for design and implementation efforts.
Monitor and manage the security posture of systems, ensuring that security controls are effective and compliant with applicable standards and regulations.
Conduct security assessments and audits, identifying vulnerabilities and recommending mitigations to strengthen the overall security posture.
Review and maintain security-related documentation, ensuring all system components and information types are clearly described and aligned with security policies.
Provide support for security authorization and accreditation processes, ensuring compliance with federal laws and regulations and assisting in the creation of security.
Provides technical and programmatic information assurance services to internal and external customers in support of network and information security systems.
Designs, develops, and implements security requirements within an organization’s business processes.
Prepares documentation from information obtained from customer using accepted guidelines. Prepares security test and evaluation plans.
Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
Recommends system enhancements to improve security deficiencies.
Develops, tests, and integrates computer and network security tools.
Secures system configurations and installs security tools, scans systems to determine compliancy and report results and evaluates products and various aspects of system administration.
Conducts security program audits and develops solutions to lessen identified risks.
Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
Provides assistance in computer incident investigations.
Performs vulnerability assessments including development of risk mitigation strategies.