Information Systems Security Officer 2 - (NIST RMF, SSP, C&A)

Akina • Annapolis Junction, MD

8d • Onsite

About The Position

Provide support for a program, organization, system, or enclave’s Information Assurance (IA) program. Maintain the operational security posture for information systems and support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and ODNI/DoD policies. Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies. Maintain records and operational security posture for workstations, servers, routers, firewalls, intelligent hubs, and network switches. Prepare, review, and update documentation including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Perform vulnerability/risk assessment analysis and evaluate security solutions to ensure compliance with classified processing requirements. Manage configuration management (CM) for security-relevant hardware, software, and firmware, and assess the security impact of system changes. Administer user identification and authentication mechanisms and support the Information System Security Manager (ISSM).

Requirements

• NIST RMF, NISCAP, ODNI, and DoD security policies
• SSP, C&A, and SRTM documentation creation and maintenance
• System security evaluation and risk/vulnerability assessment
• Configuration Management for security software/hardware/firmware
• User identification & authentication administration
• Experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
• DoD 8570 compliance with IAM Level I or higher
• Ten (10) years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
• Bachelor’s degree in Computer Science or a related discipline from an accredited college or university.
• Four (4) years of additional ISSO experience may be substituted for a Bachelor’s degree.
• Must include experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools.
• DoD 8570 compliance with IAM Level I or higher required.

Nice To Haves

• TS/SCI Clearance
• Polygraph required

Responsibilities

• Provide support for a program, organization, system, or enclave’s Information Assurance (IA) program.
• Maintain the operational security posture for information systems.
• Support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and ODNI/DoD policies.
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Maintain records and operational security posture for workstations, servers, routers, firewalls, intelligent hubs, and network switches.
• Prepare, review, and update documentation including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Perform vulnerability/risk assessment analysis and evaluate security solutions to ensure compliance with classified processing requirements.
• Manage configuration management (CM) for security-relevant hardware, software, and firmware.
• Assess the security impact of system changes.
• Administer user identification and authentication mechanisms.
• Support the Information System Security Manager (ISSM).

Benefits

• 24 days PTO accrued annually
• 11 federal holidays
• 401k is 100% vested on your start date
• Company makes a direct contribution worth 10% of your salary to 401k
• Company covers 100% of healthcare costs for employees
• Company covers 50% toward dependents' healthcare costs
• Educational assistance towards college classes
• Company will cover costs associated with job related training and certifications

What This Job Offers

• Job Type: Full-time
• Career Level: Senior