Information System Security Officer

SOUTHEASTERN COMP CONSULTANTS INC•Dahlgren, VA

18h•Onsite

About The Position

SCCI is currently seeking an Information System Security Officer (ISSO) for our Battle Management System (BMS) team. This ISSO position supports Cybersecurity requirements and tasking for the BMS family of 'tactical' projects. BMS mission planning and fire control systems provide safe and effective employment of precision guided munitions and gunfire from aircraft platforms; as well as precision guided munitions from surface and unmanned platforms. The position must be able to use, interpret, and implement security controls in a manner that supports the war fighting capabilities. This position is located in Dahlgren, VA. SCCI offers a comprehensive and competitive benefits package including Health, Dental, Vision, Life and Disability benefits, 401k with Company Match, time off consisting of 2 weeks of paid vacation, 48 hours of sick/personal leave, and 11 paid Holidays.

Requirements

Must be a U.S. Citizen and be able to obtain and maintain an active Top Secret clearance
Bachelor's (BS) degree in Computer Science, Information Technology, or related degree
Must possess an IAM level 2 certification per DoD 8140 (CISSP, CISM, GSLC, CASP, or CAP are qualifying certifications)
Experience and knowledge in Assessment and Authorization (A&A) processes and procedures with the Risk Management Framework (RMF)
Three (3) years of full-time professional experience working in an IT capacity supporting the DoD or the Department of the Navy, demonstrated familiarity with DoD systems such as Enterprise Mission Assurance Support Service (eMASS) and scanning tools such as Retina or Nessus
Experience working with eMASS
Five (5) or more years of full-time professional experience working in IT Management and demonstrated competency of information assurance policies, procedures and workforce structure to develop, implement, and maintain a secure Network Environment (NE)
Experience with DISA Security Technical Implementation Guides (STIGs), certification and accreditation, and the administration and troubleshooting of tactical and non-tactical networks
Ability to work in a fast paced, rapidly changing tactical environment
Ability to work independently and interface professionally with other government agencies, contractors, and military personnel
Ability to work with others to meet established goals and program schedules
Ability to communicate effectively, both verbally and in writing

Nice To Haves

Experience performing or assisting the duties and responsibilities of an ISSO is preferred
Experience developing RMF accreditation packages is required with Air Force RMF experience preferred

Responsibilities

Providing dedicated Assessment and Authorization (A&A) support services as defined in the RMF for verification, validation, and post accreditation
Performing validation assessments of implemented controls and maintain required documentation per RMF guidelines
Assisting in developing, maintaining or reviewing accreditation and authorization documentation such as the security plan, security assessment plan, and hardware and software diagrams
Assisting in developing, maintaining or reviewing business plans and procedures such as IT strategic plan, contingency plan, incident response plan, and standard operating procedures
Managing and documenting the ATO/IATT package process through Enterprise Mission Assurance Support Service (eMASS)
Overseeing the Information Assurance Vulnerability Management (IAVM) plan ensuring timely compliance and reporting
Collaborating with system administrators to conduct risk assessments, determine mitigation plans and creation of Plans of Action and Milestones (POA&M)
Conducting the review and verification of Security Technical Implementation Guides (STIGs)
Reviewing and analyzing Tenable Security Center and Nessus Assured Compliance Assessment Solution (ACAS) vulnerability scans
Contributing and participate in various meetings including the Configuration Control Board (CCB)
Performing problem resolution and adapt to changing technologies, processes, and organizational requirements
Exercising decision-making authority effecting the availability and function of mission-critical systems