Information System Security Officer, Journeyman (Secret)

Resource Management Concepts•Patuxent River, MD

16h•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Information Security Analyst to fill the role of Information Security Systems Officer (ISSO) to support their NAVAIR customer in Patuxent River, MD. The selected applicant will be responsible for a variety of Information Assurance and Risk Management Framework (RMF) activities, serving as an ISSO for a designated NAVAIR program and managing day-to-day cybersecurity activities. This role involves developing platform RMF authorization packages, preparing and updating RMF documentation, and preparing for CyberSafe authorization. The ISSO will also establish cybersecurity policies, implement a Cybersecurity Plan, perform asset and vulnerability management, conduct vulnerability assessments, and perform system security assessments. Additionally, the role includes evaluating and reporting software in accordance with DITPR/DADMS requirements. The position requires familiarity with classified systems (e.g., SIPRNet) and secure environments.

Requirements

A bachelor's degree and a minimum of three (3) years of relevant experience.
An associate degree plus four (4) additional years of relevant work experience or High School Diploma plus (6) additional years of relevant work experience may be substituted for a bachelor’s degree.
Knowledge and proficiency in Risk Management Framework (RMF) processes.
Knowledge and proficiency in Cybersecurity/A&A tools (i.e., eMASS, eMASSter, ACAS, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
Knowledge and proficiency in IT systems and subsystems.
Knowledge and proficiency in Project management.
Knowledge and proficiency in Written and verbal communications.
Ability to work independently and as part of a team in NAVAIR environments.
Familiarity with working on classified systems (i.e., SIPRNet) within secure environments.
Meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
Hold one of the following certifications: CAP / CGRC, Security+ CE, GSLC, CISM, CISSP.
An active DoD Secret clearance is required to start.
Must meet eligibility requirements for access to classified information.

Nice To Haves

Potential for clearance to be upgraded to a Top Secret.

Responsibilities

Serving as an ISSO for a designated NAVAIR program.
Managing Day-to-Day cybersecurity activities.
Performing duties of the Risk Management Framework (RMF) ISSO role.
Developing platform RMF authorization packages.
Preparing/Updating RMF documentation.
Preparing IATTs and Use Case MFRs as required to support development and testing.
Preparing for CyberSafe authorization in parallel with the system authorizations.
Establishing Cybersecurity policies IAW security control implementations.
Implementing a Cybersecurity Plan.
Performing asset and vulnerability management via VRAM reporting.
Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
Performing system security assessments.
Evaluating and reporting software IAW DITPR/DADMS requirements.