Information Systems Security Officer (ISSO)

Torch Technologies, Inc.•Huntsville, AL

1d•Onsite

About The Position

Torch Technologies is seeking a motivated Information Systems Security Officer (ISSO) with a background in DoW regulations pertaining to RMF and Cybersecurity. The ideal candidate will possess excellent communication skills both oral and written; exhibit the ability to adapt and thrive in a dynamic, work environment servicing multiple agencies. Off Hours support may occasionally be required as mission dictates.

Requirements

U.S. Citizenship.
Bachelor's Degree in Computer Science or a related field.
4-10 years of hands-on experience in cybersecurity/information assurance.
Cyber certifications in support of DoDM 8140, such as Security+, CISSP, CISM, etc.
Working knowledge of RMF, NIST SP 800-53, and DISA STIGs.
Demonstrable experience implementing and validating NIST SP 800-53 controls and reporting findings, artifacts, and other supporting documentation in eMASS.
Proficiency with security tools such as ACAS/Nessus, SCAP Compliance Checker (SCC), and log aggregate tools.
Strong technical understanding of operating systems (Windows/Linux), networking concepts, and virtualization.
Must have an Active current Secret clearance, with SAP eligibility, and the ability to upgrade to Top Secret.

Nice To Haves

An active Top Secret clearance, with SAP eligibility.
Experience conducting authorizations under JSIG.
Direct experience with Sensitive Compartmented Information Facilities (SCIF) and Special Access Program Facilities (SAPF).

Responsibilities

Provide cybersecurity support per DoDI 8500.01, including assessing and continuously monitoring cybersecurity risk to ensure legacy and new capabilities adhere to enterprise standards such as the Risk Management Framework (RMF), National Institute of Standards and Technology (NIST), and the Authorization Official’s Information System Continuous Monitoring (ISCM) strategy.
Ensure all cybersecurity-related documentation is current and accessible to properly authorized individuals.
Support the Program Manager (PM) or Information System Owner (ISO) and Information Systems Security Manager (ISSM) in maintaining current authorization to operate (ATO), approval to connect (ATC) if required, and implementing corrective actions identified in the Plan of Actions and Milestones (POA&M).
Continuously monitor systems and their environments for security-relevant events.
Assist the ISSM in the assessment of proposed configuration changes for potential impact to the cybersecurity posture.
Assist the ISSM in assessing the quality of security controls implementation against established performance indicators.
Evaluate system security posture and identify weaknesses using tools such as ACAS and DISA STIGs.