Mid Level Information System Security Officer (ISSO) (eMASS Specialist)

Amentum•Fort Meade, MD

6d•$120,000 - $160,000•Onsite

About The Position

Amentum is seeking an Information System Security Officer (ISSO) to support DISA mission-critical IT capabilities at Fort Meade, Maryland. The role supports the engineering, integration, deployment, and sustainment of secure IT enterprise solutions for the Department of Defense and intelligence missions. The ISSO leads efforts to establish and maintain security baselines and is the primary on-site security point of contact for system owners, administrators, users, and the ISSM. The ISSO is responsible for the day-to-day security posture of assigned information systems that process, store, or transmit classified and sensitive intelligence information. The role ensures systems are operated, maintained, and disposed of in compliance with Intelligence Community policy, the Risk Management Framework (RMF), and the systems’ authorizations to operate. Work is conducted daily in a SCIF, with possible periods in a datacenter. The schedule is eight hours per day, Monday through Friday.

Requirements

Active Top Secret clearance with SCI eligibility.
Bachelor’s degree in cybersecurity, information systems, computer science, or a related technical field, or equivalent experience. The posting describes additional experience as a substitute for a degree.
Typically 3–5 years of information assurance or cybersecurity experience in a classified environment.
Hands-on experience managing system records, controls, artifacts, and POA&Ms in eMASS.
Experience supporting classified networks, cross-domain solutions, or multi-enclave environments.
Familiarity with ACAS, STIG Viewer, SCAP, and Assured Compliance tools.
Experience supporting ATO packages for cloud environments, such as C2S or commercial cloud for classified workloads.
Familiarity with IC tools and processes for reciprocity and enterprise authorization.
Experience briefing authorizing officials, program managers, and senior leadership.
Strong understanding of security control families and interpretation of implementation, inheritance, and assessment procedures.
Ability to translate technical findings into clear risk statements and policy into practical guidance for system administrators.
Excellent written communication and attention to detail in documentation.
Ability to manage multiple packages, systems, and competing deadlines; work independently and with cross-functional teams; and exercise sound judgment with classified and sensitive information.
Working knowledge of RMF, NIST SP 800-37, 800-53, and 800-53A, CNSSI 1253, and ICD 503.
Thorough knowledge of IC and national security information system policy, including CNSS issuances and agency directives.
Skill in assessing risk and applying technical, operational, and management controls.
Experience with Windows and Linux hardening, vulnerability scanning, and log review.
Ability to write clearly and brief technical and non-technical audiences.
Experience on JWICS, SIPRNet, or other IC-specific networks, and with cross-domain solutions.
One or more of the following certifications: Security+ CE.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Certified Access Specialist (CASP).
Certified Information Security Manager (CISM).
Certified Information System Auditor (CISA).

Responsibilities

Support all RMF steps for assigned systems in accordance with ICD 503, NIST SP 800-37 and 800-53, and CNSSI 1253.
Maintain system records in eMASS or an equivalent governance, risk, and compliance tool.
Develop and maintain authorization packages, including System Security Plans, security control implementation statements, POA&Ms, contingency plans, and configuration management plans.
Coordinate with assessors and authorizing officials and track systems through initial authorization, reauthorization, and continuous monitoring.
Review vulnerability scan results, audit logs, and security configuration baselines; coordinate remediation and track POA&M items to closure.
Verify patching, antivirus and endpoint protection, and configuration changes meet required timelines and baselines.
Conduct periodic self-inspections and prepare for agency and external inspections, audits, and assessments.
Ensure system changes undergo security impact analysis and configuration control board review before implementation.
Detect, document, and report security incidents, spillages, and policy violations to the ISSM and appropriate incident response and counterintelligence elements within required timeframes.
Support containment, sanitization, and recovery after classified data spillage or suspected compromise.
Assist insider threat and counterintelligence personnel with authorized user activity monitoring and audit data requests.
Verify users have appropriate clearance, formal access approvals, need-to-know, and signed user agreements before access is granted.
Oversee privileged user accounts and enforce separation of duties and least privilege.
Brief users on security responsibilities and deliver initial and annual security awareness training.
Enforce procedures for control, marking, transfer, sanitization, and destruction of classified media and removable storage.
Support cross-domain solution and data transfer processes with the responsible approval authority.
Verify systems are installed and operated in accredited spaces consistent with ICD 705 and facility accreditation.
Advise system owners, program managers, and engineers on security requirements during design, acquisition, and development, including supply chain risk considerations.
Participate in working groups, configuration control boards, and security reviews.
Maintain current knowledge of IC and DoD policy, emerging threats, and technology changes affecting assigned systems.
Fulfill applicable safety, quality, procedure-compliance, training, and emergency-response responsibilities.