Information System Security Officer (ISSO)

Vantor Services•Herndon, VA

1d•Onsite

About The Position

Vantor is seeking an Information System Security Officer (ISSO) to support secure mission systems in Herndon, VA. In this role, you will partner with systems engineers, software engineers, integration and test teams, the ISSM, and security leadership to maintain the security posture of integrated hardware and software environments. You will support DoD information assurance activities, RMF execution, vulnerability management, and continuous monitoring in an Agile Scrum environment.

Requirements

Must be U.S. Citizen and have active TS security clearance and be willing and able to obtain CI Polygraph.
Ability to travel up to 5% as needed.
Bachelor’s degree in computer science, information systems, engineering, business or related scientific or technical discipline.
4 years of additional experience may be substituted for a degree.
5 years of relevant experience.
Familiarity with DoD software policies and DoD system security requirements to include National Industrial Security Program Operation Manual (NISPOM).

Nice To Haves

Current active TS/SCI clearance.
IAT Level II certification.
Experience working on UNIX/Linux platforms and TCP/IP security.
Previous experience as a security professional in a SAP/SCI environment on government contracts.
Strong verbal and written communication skills to work in a collaborative team environment.
Experience with Atlassian Jira issue tracking software.
Agile development and/or SCRUM experience.
Experience with SharePoint.
Experience supporting DoD information collection systems.
Effectively work in a fast-paced operations support environment as part of an Agile Scrum team.

Responsibilities

Oversee Information Assurance compliance for USG network integrated systems to include software vulnerability testing and hardware hardening.
Work closely with the Information System Security Manager (ISSM) and Security Manager in the operations and management of the Information Assurance (IA) and Computer Security (CS) for program networks.
Provide experience with the Risk Management Framework (RMF) process and its application under the DoD in this position.
Analyze and resolve INFOSEC technical problems.
Configures testbeds and conducts testing, records and analyzes results, and provides recommendations for improvements for the products/systems under test.
Support full lifecycle Assessment and Authorization (A&A) deliverables, Security Control Traceability Matrix (SCTM) and Plan of Action and Milestones (POA&M).
Configuration Control to include: Software/hardware authorizations, network configuration changes, and system security engineering.
Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis.