Information System Security Officer

Invictus International Consulting, LLC•Alexandria, VA

About The Position

Assist with the development and centralization of Authorization & Accreditation (A&A) files and documentation, and maintain files/library; ensure validity and integrity of all systems Create, update, and delete entries in databases utilized for the tracking of system and network compliance Ensure that all IA systems are properly documented with Configuration Management (CM) processes Maintain the security accreditation status of systems, including the review of current documentation, system architectures and coordination with engineering team to ensure the documentation is accurate with the current architecture, IAW DoD policies Perform, participate and support all A&A efforts for systems, networks, and applications (all security domains) IAW DoD requirements Manage the coordination of assessment metric submissions Provide direct support in the development of A&A related systems bodies of evidence in accordance with current NIST guidance, using the government provided A&A tools Work in coordination with the engineering teams to establish CM system to ensure proper configuration and adherence to security standards for all development actions Provide guidance on the application of security policy, identifying security requirements, providing guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation Develop supporting test reports, artifacts, and POA&Ms documenting open findings, preparation of formal A&A packages Assist the engineering team to maintain the system and keep up to date on versioning, patching and anti-virus

Requirements

Bachelor's degree in computer science, cybersecurity or related technical discipline preferred
Foundational studies in Computer Science, Cyber Security, Information Assurance, or a related technical discipline.
Knowledge of Risk Management Framework as described in NIST Directives, CNSSI 1253A and ICD- 503
Awareness and understanding of DoD issuances such as policy, instructions, manuals, memorandums, standards, and other relevant releases that impact the A&A process
Solid understanding of federal laws, specifically pertaining to IT, cybersecurity, FISM and DoD
Strong ability to communicate both written and orally
Minimum DoD 8570 IAM Level I/IAT II certification
US citizenship required
Current TS/SCI required, with the ability to obtain and maintain a CI polygraph

Responsibilities

Assist with the development and centralization of Authorization & Accreditation (A&A) files and documentation, and maintain files/library; ensure validity and integrity of all systems
Create, update, and delete entries in databases utilized for the tracking of system and network compliance
Ensure that all IA systems are properly documented with Configuration Management (CM) processes
Maintain the security accreditation status of systems, including the review of current documentation, system architectures and coordination with engineering team to ensure the documentation is accurate with the current architecture, IAW DoD policies
Perform, participate and support all A&A efforts for systems, networks, and applications (all security domains) IAW DoD requirements
Manage the coordination of assessment metric submissions
Provide direct support in the development of A&A related systems bodies of evidence in accordance with current NIST guidance, using the government provided A&A tools
Work in coordination with the engineering teams to establish CM system to ensure proper configuration and adherence to security standards for all development actions
Provide guidance on the application of security policy, identifying security requirements, providing guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation
Develop supporting test reports, artifacts, and POA&Ms documenting open findings, preparation of formal A&A packages
Assist the engineering team to maintain the system and keep up to date on versioning, patching and anti-virus