Information Systems Security Officer

MANTECH•Stafford, VA

3d•$114,600 - $190,200•Onsite

About The Position

MANTECH is seeking a motivated, customer-oriented Information Systems Security Officer (ISSO) to support its Marine Corps Systems Command contract in Stafford, Virginia. The role provides cybersecurity information assurance support for Marine Corps information, intelligence, and cybersecurity programs. The ISSO supports development and maintenance of Risk Management Framework (RMF) security authorization packages and related security documentation, performs vulnerability and risk analyses throughout the system development life cycle, and helps interpret cybersecurity requirements into technical solutions. The position also supports secure system planning, engineering, operation, and compliance with applicable Department of Defense, Department of the Navy, and Marine Corps requirements. The role requires a current, active DoD Top Secret/SCI clearance. The work is onsite and classified as sedentary. The projected compensation range is $114,600 to $190,200. MANTECH benefits may include health and life insurance, paid time off, holiday pay, short- and long-term disability, retirement and savings, learning and development opportunities, wellness programs, and optional benefit elections, depending on position.

Requirements

Bachelor’s degree and at least 5 years of experience performing ISSO duties in the DoD; an additional 2 years of experience may be substituted for the degree.
DoD 8140 compliance, such as a Security+ certification.
Experience working with RMF, NIST, and other federal guidelines.
Experience using assessment tools such as ACAS, SCAP, and HBSS, and RMF process tools such as MCCAST, eMASS, and eArcher.
Knowledge of information security systems and applications for DoD projects.
Security Testing and Evaluation experience.
Current, active DoD Top Secret/SCI clearance.

Nice To Haves

Marine Corps experience.
DoD Information Technology Portfolio Repository and Department of the Navy experience.
Knowledge of DoDI 8510.01; NIST 800 series publications; Intelligence Community Directive (ICD) 503; DoD Intelligence Information System (DoDIIS)-Joint Security Implementation Guide (DJSIG); Intelligence Community Information Technology Systems Security Risk Management; emerging cybersecurity policies; and other policies, orders, and directives pertaining to the role.

Responsibilities

Support and assist in developing Risk Management Framework (RMF) security authorization packages based on current doctrine.
Assist government programs in generating and maintaining security documentation, including System Security Plans, Backup and Recovery Plans, Contingency Plans, and System Security Plan of Action and Milestones (POA&Ms), to ensure compliance with government security policies and procedures.
Perform vulnerability and risk analyses of assigned information systems throughout all phases of the System Development Life Cycle; analyze vulnerability scan results and DISA STIGs; and generate and maintain system security POA&Ms.
Interpret cybersecurity requirements into technical solutions and analyze system configurations to determine, maintain, and improve security posture.
Recommend system configurations and administration control procedures to enhance security and performance and ensure assigned Marine Corps information systems comply with applicable laws, policies, and cybersecurity requirements.
Provide cybersecurity support for information systems, including policymaking, programmatic and technical assistance, and planning, documentation, engineering, and operation in secure environments.
Assist with generating network and system diagrams depicting ports, protocols, and boundaries, and update the Ports, Protocols, and Services Management Registry as required.