Information Systems Security Engineer/Officer (ISSE/ISSO) / Active Secret
About The Position
Peraton is seeking to hire an experienced Information Systems Security Engineer/Officer (ISSE/ISSO) – Dept. of Navy Support. Location: On-site role in DamNeck, VA We are currently seeking an experienced Information Systems Security Engineer/Officer (ISSE/ISSO) to provide cybersecurity support to the Department of the Navy (DON). This role includes full-spectrum Risk Management Framework (RMF) Assessment & Authorization (A&A) support, Navy Qualified Validator (NQV) activities, and continuous monitoring tasks in alignment with applicable Navy policies and instructions.
Requirements
- Bachelors degree and a minimum of five (5) years of relevant experience. An additional 4 years of relevant experience will be considered in lieu of the degree requirement.
- Minimum certification: Security+ or any of the 461 (or equivalent required by the Technical Instruction) at the Intermediate level per DoDD 8140.01 or successor certifications.
- Performing Risk Management Framework (RMF) activities.
- Conducting STIG assessments, including use of SCAP benchmarks.
- Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) tool.
- Using eMASS for RMF package development and maintenance.
- Developing Plans of Action and Milestones (POA&M) entries.
- Completing RMF Step 5 authorizations in an ISSE capacity.
- Communicating risk reduction strategies and recommendations to stakeholders.
- U.S. citizenship is required.
- Clearance: Active Secret security clearance with the ability to obtain a final Top Secret with SCI eligibility.
- Must hold and maintain a final adjudicated Tier 5 security investigation with IT Level 1 designation (JPAS and/or DISS) for privileged user access.
Nice To Haves
- STIG assessments using SCAP benchmarks and Evaluate STIG tools.
- Vulnerability assessments using ACAS.
- Applying processes and workflows in eMASS.
- Developing accurate POA&M entries.
- Supporting RMF Step 5 ISSE authorization activities.
- Providing risk-based recommendations to technical and non-technical stakeholders.
Responsibilities
- Provide ISSE/ISSO support for DON RMF A&A activities in accordance with Navy cybersecurity policies and instructions.
- Deliver Navy Qualified Validator (NQV) support for Authority to Operate (ATO) package submissions and RMF Step 6 continuous monitoring activities.
- Conduct security control risk assessments and validations as an NQV.
- Perform annual security reviews and annual testing of security controls (ISSO, ISSE, and NQV Level II/III).
- Manage and maintain POA&M entries to ensure vulnerabilities are properly tracked, mitigated, and resolved.
- Plan and execute cybersecurity testing to assess security controls and document compliance status.
- Evaluate the quality and effectiveness of security control implementations against RMF requirements.
- Conduct vulnerability assessments and provide risk reduction recommendations to stakeholders.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
5,001-10,000 employees
