Information System Security Officer

Resource Management Concepts, Inc.•Hill Air Force Base, UT

2d•$100,000 - $135,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is hiring for an Information System Security Officer (ISSO) who will provide support to a software development environment. The selected applicant will perform a variety of Information Assurance activities including but not limited to implementing security programs and policies, maintaining knowledge of system functions and security measures, monitoring system resources for vulnerabilities and attacks, providing inputs for RMF Body of Evidence artifacts, assisting with Security Assessment Reports, using WSUS, SCCM and SCOM for updates, providing POA&M inputs, executing Continuous Monitoring Plans, reviewing audit logs, and performing compliance/vulnerability scans.

Requirements

A high school diploma or GED is required.
At least eight (8) years of experience in Information Assurance or System Administration.
Must have or be able to obtain a Security+ Certification or equivalent DoD 8570.01 Baseline Certification within 3 months of hire.
An active DoD Secret clearance is required to start.
Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.

Nice To Haves

A bachelor’s degree in computer science or related technical discipline is ideal.
Experience working with DOD Enterprise Mission Assurance Support Service (eMASS)

Responsibilities

Implementing the security program and policies for assigned Information Systems.
Maintaining a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Monitoring all available system resources that provide warnings of vulnerabilities or ongoing attacks and report them to the ISSM for Windows Server and VMWare environments.
Providing inputs to the ISSM to the RMF Body of Evidence artifacts and to facilitate the Security Controls Assessment.
Assisting the ISSM with the creation of the Security Assessment Report.
Use WSUS, SCCM and SCOM to review, monitor and validate updates to operating systems and applications.
Provide Plan of Action and Milestones (POA&M) inputs to the ISSM (specifically resources required, scheduled completion date, milestones with completion dates, and milestone changes).
Execute the Continuous Monitoring Plan and document the results. Provide the results to the ISSM.
Review/analyze Audit Logs.
Perform compliance/vulnerability scans (e.g., ACAS, NESSUS, SCAP, STIG checks) to validate that the system has properly updated, and report the results to the ISSM.