Information System Security Officer, Journeyman (Top Secret/SCI)

Resource Management Concepts, Inc.•Patuxent River, MD

1d•$120,000 - $140,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Information Security Analyst to fill the role of Information Security Systems Officer (ISSO) to support a Navy customer in Patuxent River, MD. The selected applicant will be responsible for a variety of Information Assurance and Risk Management Framework (RMF) activities. This is a Journeyman-level position where the candidate is expected to perform all functional duties independently. The role requires 100% onsite presence in a classified government facility.

Requirements

A bachelor's degree and a minimum of three (3) years of relevant experience are required. An associate degree plus four (4) additional years of relevant work experience or High School Diploma plus (6) additional years of relevant work experience may be substituted for a bachelor’s degree.
Must meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
Must have one of the following certifications to start: CAP / CGRC, SecurityX CE, GSLC, CISM, CISSP.
An active DoD TOP SECRET clearance is required to start and move to SCI when program requirements dictate.
Applicant may be subjected to a security investigation and must meet eligibility requirements for access to classified information.
Knowledgeable and proficient in Risk Management Framework (RMF) processes.
Knowledgeable and proficient in Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
Knowledgeable and proficient in IT systems and subsystems.
Knowledgeable and proficient in Project management.
Knowledgeable and proficient in Written and verbal communications.
Knowledgeable and proficient in Teamwork and collaboration.
Knowledgeable and proficient in Working on classified systems (i.e., SIPRNet) within secure environments.

Responsibilities

Serving as an ISSO for a designated NAVAIR program.
Supports and develops Authorization to Operate (ATO) packages for upcoming boundaries that need to be authorized.
Support the systems compliance with DoD security controls, Security Technical Implementation Guides (STIGs), and applicable policies.
Track and document security-relevant changes to hardware, software, and firmware. Ensures Hardware and software profiles exist for each boundary are compliant.
Work as a part of a Cybersecurity team while independently accomplish assigned responsibilities.
Creates Memorandums for the Record (MFRs) for any major changes to the boundaries. Submits these MFRs for review by the DAO.
Developing RMF authorization packages.
Performing validation activities for authorization packages.
Preparing/Updating RMF documentation.
Preparing IATTs and Use Case MFRs as required to support development and testing.
Implementing a Cybersecurity Plan.
Perform weekly validation of auditing to ensure audits have been completed for each boundary.
Performing Cyber Tabletop exercises.
Performing asset and vulnerability management via VRAM reporting.
Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
Performing system security assessments.
Evaluating and reporting software IAW DITPR/DADMS requirements.