Information System Security Officer (ISSO)

IP Secure, LLC•Melbourne, FL

1h•Onsite

About The Position

IPSecure is seeking an Information System Security Officer to provide Risk Management Framework (RMF) support. The position primarily supports collateral Top Secret and below programs and performs all aspects of DoD RMF activities, including documenting, implementing, and assessing security controls, system monitoring, and compliance assessments. The ISSO works with program and site leads, government staff, mission partners, system administrators, and cyber team members to maintain an effective information security program. The role also involves sharing knowledge and training others.

Requirements

Bachelor’s degree in Cybersecurity or a related field and 3+ years of experience, or a master’s degree.
Active Top Secret security clearance with SCI.
Experience in information assurance or cybersecurity roles supporting classified DoD environments.
DoD 8570 IAM Level I (Security+) or higher baseline certification.
Security+ with CE certification.
Working knowledge of NIST 800-53 controls and RMF.
Experience analyzing and interpreting outputs from endpoint security, vulnerability, and enumeration tools, such as Tenable Nessus, Security Center, SolarWinds, endpoint security solutions, Vulnerator, and SCAP Compliance Checker.

Nice To Haves

CISSP certification is preferred.
Additional training and/or certifications may be required within 6 months of hire.
Proven communication skills for coordinating with program and site leads, government staff, and mission partners.

Responsibilities

Work as part of an integrated team to develop and maintain RMF body-of-evidence documentation, such as System Security Plans, Security Controls Traceability Matrices, Plans of Action and Milestones, and ATOs, using Microsoft Word, Excel, PowerPoint, and Visio.
Maintain repositories of body-of-evidence documentation for systems under the role’s purview and restrict access to properly authorized individuals.
Develop and execute security control assessment procedures to verify control conformance during continuous monitoring and authorization assessments.
Coordinate with system administrators and cyber team members to ensure systems are operated, maintained, and disposed of according to applicable security policies and procedures; notify the ISSM of changes that could affect authorization posture.
Support the CISO, PM, ISSM, or ISO in maintaining current authorization to operate and approval to connect, and in implementing corrective actions identified in the POA&M.
Coordinate development of an information system configuration management strategy with CISO, PM, ISSM, and AO staff, and monitor proposed or actual system and environmental changes.
Document all security-related vulnerabilities and deficiencies in the POA&M.
Integrate cybersecurity throughout the IT lifecycle on behalf of the ISSM and ISO.
Ensure development and implementation of an effective information security education, training, and awareness program.
Ensure configuration management policies and procedures for authorizing hardware and software use are followed; coordinate hardware, software, or firmware additions, changes, or modifications with the ISSO/ISSM before implementation.
Ensure software, hardware, and firmware comply with applicable security configuration guidelines, such as STIGs and security requirement guides.
Report security incidents or vulnerabilities to the CISO, ISSM, or wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.