Information System Security Officer - ISSO IRES - SSFB

Amentum•Colorado Springs, CO

2d•Onsite

About The Position

The Information System Security Officer – ISSO supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will develop and provide RMF Assessment and Authorization (A&A) documentation in accordance with DoD, NIST, and other governing documents. They will maintain the current, approved Authorization to Operate (ATO) for assigned systems, gathering and/or developing any needed A&A artifacts and updating them as required to ensure they are current and document findings in the approved Risk Management Framework (RMF) or similar A&A documentation format provided. The role also involves assisting with monitoring and the implementation of security controls, experience with incident management, response, and response coordination, and gathering artifacts/data to support cybersecurity metrics and reporting. Understanding of cybersecurity tools (ACAS, Trellix ePO, Elasticsearch) and verification of operation in accordance with requirements is necessary. The ISSO will perform accurate and verified risk assessments that cover all of the security controls and policies for key stakeholders, track, monitor, and manage the information system’s Plan of Action and Milestones (POA&M) and provide technical assistance as required. They will also analyze, verify and update PPSMs as required for programs, provide artifacts that support the maintenance of security packages, evaluate NIST 800-53 controls for applicability, generate implementation statements, and get implementations approved. Finally, the ISSO will prepare documents in support of Control Validation Tests (CVTs) to confirm compliance of ATOs submitted for RMF packages. The successful candidate will be detail-oriented, motivated, and have the ability to efficiently and effectively discover and research supporting documents.

Requirements

Must have 3 , or more, years of directly related experience
Must have firm understanding of JSIG
Must have SAP experience
Must have a high level of understanding for computer systems, operating systems, and network architecture
Must have a firm understanding and experience with Microsoft Office Suite
Must have experience with Configuration Management processes and workflows
Must have an active DoW Top Secret Security Clearance w/ SCI eligibility

Nice To Haves

Have experience with MDA SAP

Responsibilities

Develop and provide RMF Assessment and Authorization (A&A) documentation in accordance with DoD, NIST, and other governing documents
Maintain the current, approved Authorization to Operate (ATO) for assigned system.
Gather and/or develop any needed A&A artifacts.
Update artifacts as required ensuring that they are current and document findings in the approved Risk Management Framework (RMF) or similar A&A documentation format provided
Assist with monitoring and the implementation of security controls
Experience with incident management, response, and response coordination
Gathering artifacts/data to support cybersecurity metrics and reporting
Understanding of cybersecurity tools (ACAS, Trellix ePO, Elasticsearch) and verification of operation in accordance with requirements
Perform accurate and verified risk assessments that cover all of the security controls and policies for key stakeholders
Track, monitor, and manage the information system’s Plan of Action and Milestones (POA&M) and provide technical assistance as required
Analyze, verify and update PPSMs as required for programs
Provide artifacts that support the maintenance of security packages
Evaluate NIST 800-53 controls for applicability, generate implementation statements, and get implementations approved
Prepare documents in support of Control Validation Tests (CVTs) to confirm compliance of ATOs submitted for RMF packages