Information Systems Security Officer 2

T-Rex Solutions•Fort Meade, MD

3d•$160,000 - $200,000

About The Position

T-Rex is seeking a fully cleared Information Systems Security Officer 2 to support an Intelligence Community program in the Fort Meade, Maryland area. The role supports an information assurance program and helps establish, implement, and enforce information systems security policies, standards, and methodologies. The ISSO maintains the security posture of an information system or program, manages security aspects and day-to-day security operations, evaluates security solutions for classified information processing, and performs vulnerability and risk assessment analysis to support certification and accreditation. The position also provides configuration management for information system security software, hardware, and firmware; assesses the security impact of system changes; prepares and reviews security documentation; and supports authorization activities in accordance with the NIST Risk Management Framework. Applicants must have an active, transferable U.S. government TS/SCI with FSP clearance and meet the stated experience, education or substitution, and DoD 8570 certification requirements.

Requirements

Ten years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Experience must include at least two of the following: knowledge of current security tools; hardware/software security implementation; communication protocols; or encryption techniques/tools.
Bachelor’s degree in Computer Science or a related discipline from an accredited college or university, or four years of ISSO experience as a substitution.
DoD 8570 compliance with Information Assurance Management (IAM) Level I or higher.
Active and transferable U.S. government-issued TS/SCI with FSP security clearance.

Responsibilities

Support an information assurance program for a program, organization, system, or enclave.
Support the proposal, coordination, implementation, and enforcement of information systems security policies, standards, and methodologies.
Maintain the operational security posture of an information system or program and ensure applicable security policies, standards, and procedures are established and followed.
Assist with management of information system security aspects and perform day-to-day security operations.
Evaluate security solutions to ensure they meet requirements for processing classified information.
Perform vulnerability and risk assessment analysis to support certification and accreditation.
Provide configuration management for information system security software, hardware, and firmware.
Manage system changes and assess their security impact.
Prepare and review System Security Plans, Risk Assessment Reports, Certification and Accreditation packages, and System Requirements Traceability Matrices.
Support security authorization activities in compliance with the NIST Risk Management Framework.