Information System Security Officer, Journeyman (Secret)

Resource Management Concepts•Patuxent River, MD

37d

About The Position

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is hiring an Information Security Analyst for the role of Information Security Systems Officer (ISSO) to support our NAVAIR customer in Patuxent River, MD. The selected applicant will perform a variety of Information Assurance and Risk Management Framework (RMF) activities, including but not limited to: Serving as an ISSO for a designated NAVAIR program. Managing Day-to-Day cybersecurity activities. Performing duties of the Risk Management Framework (RMF) ISSO role, including: Developing platform RMF authorization packages. Preparing/Updating RMF documentation. Preparing IATTs and Use Case MFRs as required to support development and testing. Preparing for CyberSafe authorization in parallel with the system authorizations. Establishing Cybersecurity policies IAW security control implementations. Implementing a Cybersecurity Plan. Performing asset and vulnerability management via VRAM reporting. Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs). Performing system security assessments. Evaluating and reporting software IAW DITPR/DADMS requirements.

Requirements

Risk Management Framework (RMF) processes.
Cybersecurity/A&A tools (i.e., eMASS, eMASSter, ACAS, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
IT systems and subsystems.
Project management.
Written and verbal communications.
Ability to work independently and as part of a team in NAVAIR environments.
The applicant must be familiar with working on classified systems (i.e., SIPRNet) within secure environments.

Responsibilities

Serving as an ISSO for a designated NAVAIR program.
Managing Day-to-Day cybersecurity activities.
Developing platform RMF authorization packages.
Preparing/Updating RMF documentation.
Preparing IATTs and Use Case MFRs as required to support development and testing.
Preparing for CyberSafe authorization in parallel with the system authorizations.
Establishing Cybersecurity policies IAW security control implementations.
Implementing a Cybersecurity Plan.
Performing asset and vulnerability management via VRAM reporting.
Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
Performing system security assessments.
Evaluating and reporting software IAW DITPR/DADMS requirements.