MD POLY Security Clearance required

Power3 Solutions•Hanover, MD

1d•Onsite

About The Position

Capstone Technology Partners is seeking an Information Systems Security Officer to provide security architecture and systems engineering support for ICAM projects. The ISSO will guide the team through system accreditation, including IATT and ATO processes, and help maintain systems’ security posture. The role includes developing and reviewing RMF accreditation artifacts, coordinating with ISSMs and DAOs, evaluating security compliance, tracking authorization status, and supporting personnel with PRIVAC requests and extensions. The position is located in Hanover, Maryland, and requires a TS/SCI clearance with a Maryland polygraph.

Requirements

Active TS/SCI clearance with polygraph.
IAM Level 1 CWIP certification, with one of the following baseline certifications: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, CASP+ CE, CISM, CISSP (or Associate), or CCISO.
Bachelor’s degree in a technical discipline from an accredited college or university, or four additional years of experience in place of the degree.
Ten years of relevant work experience.
At least four years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Experience with the ICD 503/NIST 800-53 certification and accreditation process.
Experience with the Risk Management Framework.
Experience developing and maintaining SSPs.
Experience with IAVA review and handling.
Experience interpreting security scan results.
Experience interfacing with system administrators and software engineers.
Experience using task-tracking systems such as Jira, Redmine, or ServiceNow.
Understanding of Public Key Infrastructure-based authentication.
Understanding of security policies, particularly within the Intelligence Community, and fundamentals of technical security risk assessment.
Understanding of how to perform analysis of alternatives.
Ability to clearly communicate ideas and status updates to management and other stakeholders.

Responsibilities

Prepare system security plans (SSPs) and recommend actions to support obtaining ATOs.
Identify, develop, review, and incorporate RMF accreditation package artifacts, including system architecture and boundaries, hardware and software inventories, risk assessment reports, POA&Ms, data flows, and system, network, and application documentation.
Work with ISSMs and DAOs to ensure systems obtain and maintain accreditation.
Verify that package submissions meet approval thresholds, including C&A packages for system reauthorization, SAR findings, CTOs, POA&Ms, and SSPs.
Apply continuous monitoring techniques to evaluate system security posture.
Create tasking for developers and system administrators when changes and patching are required.
Oversee implementation of software patches to maintain organizational security posture.
Implement and enforce information systems security policies, standards, and methodologies.
Use vulnerability scanning and assessment tools such as ACAS/Nessus to identify and document compliance.
Review audit logs weekly.
Perform weekly data transfers while driving from the CACI Hanover Office to Ft. Meade.
Maintain and report assessment and authorization statuses and issues in accordance with organizational guidance.
Understand the PRIVAC process and support personnel with new PRIVAC requests and extensions.

Benefits

Four weeks of paid time off.
Eleven paid holidays.
401(k) plan with 4% employer contributions, immediate vesting, and an annual 3% contribution.
Annual performance bonuses.
Medical, dental, and vision insurance.
Education and training budget.
Technical certification and coursework budget for computer/program expenses.
Gym membership reimbursement.
Amazon Prime membership reimbursement.
Birthday Club.
Capstone swag.