Information System Security Officer (ISSO)

Peraton•Washington, DC

2d•$104,000 - $166,000•Onsite

About The Position

Peraton is seeking an Information System Security Officer (ISSO) to work on a large-scale enterprise Information Technology (IT) program onsite in Washington D.C. This role will work closely with the team to monitor, assess, and maintain the security controls, ensuring that systems meet the necessary security requirements as outlined in the Risk Management Framework (RMF).

Requirements

5 years with BS/BA; 3 years with MS/MA; 9 years experience may be considered in lieu of BS degree.
Minimum 3 years’ experience in security engineering of Information Systems
Top Secret clearance with SCI eligibility is required
Proven ISSO experience across a large-scale enterprise Information Technology (IT) program
Experience with Scrum methodologies
Strong written and verbal communication
Analytical and problem-solving abilities
Teamwork and collaboration
Organizational and multitasking skills
Proficiency with Nesssus (ACAS), Splunk, STIGS, SCAP tools
DoD 8570.1-M IAT Level II certification (i.e., Security+ CE, CAP) required

Nice To Haves

ITILv4 Foundation Certification desired
Experience with ServiceNow
Proficiency with eMASS and Xacta
DoD 8570.1-M IAT Level III certification (i.e., CISSP or CISM) desired

Responsibilities

Assist in the development and maintenance of RMF documentation and artifacts, ensuring proper security controls and safeguards are implemented for all systems.
Collaborate with the ISSE and other engineering teams to assess and integrate security controls, providing security guidance for design and implementation efforts.
Monitor and manage the security posture of systems, ensuring that security controls are effective and compliant with applicable standards and regulations.
Conduct security assessments and audits, identifying vulnerabilities and recommending mitigations to strengthen the overall security posture.
Review and maintain security-related documentation, ensuring all system components and information types are clearly described and aligned with security policies.
Provide support for security authorization and accreditation processes, ensuring compliance with federal laws and regulations and assisting in the creation of security.