Mid -Level ISSO Engineer - (ADV000BEK)

GeoControl Systems•Huntsville, AL

21h•Onsite

About The Position

The Mid-Level ISSO supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will perform verified risk assessments that cover all the security controls and policies that are aligned with Joint SAP Implementation Guide (JSIG) methodologies. They will develop and maintain artifacts in support of Control Validation Tests (CVT) to confirm compliance with ATO’s for SAP packages. This role requires hands-on experience conducting audits with both Windows and Linux systems, understanding STIGs and experience with STIG viewer. The candidate will monitor and assist with implementing security controls, manage and monitor Plan of Action and Milestones (PO&AMs) effectively, conduct routine audit management, monitor and validate patch management, and monitor and validate endpoint security. Additionally, the role involves developing security metrics and reporting and being able to articulate the metrics. Resumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.

Requirements

Must have 4, or more, years of general (full-time) work experience
Must have 2, or more, years of directly related experience
Must have 1, or more, years of experience working in a management or leadership role
Must have a current DoD 8570 IAT Level II Certification (ex: Security+)
Must have a current DoD 8570.01 IAM Level II Certifications (ex: CGRC (CAP) or SecurityX (CASP+CE))
Must have an active DoD Top Secret Security Clearance w/ SCI Eligibility

Nice To Haves

Be proficient knowledge and experience with Windows and Linux Systems IOS
Have experience with SolarWinds - SEM tool
May be reduced with completion of advanced education

Responsibilities

Perform verified risk assessments that cover all the security controls and policies that are aligned with Joint SAP Implementation Guide (JSIG) methodologies
Develop and maintain artifacts in support of Control Validation Tests (CVT) to confirm compliance with ATO’s for SAP packages
Conduct audits with both Windows and Linux systems
Understand STIGs and experience with STIG viewer
Monitor and assist with implementing security controls
Manage and monitor Plan of Action and Milestones (PO&AMs) effectively
Conduct routine audit management
Monitor and validate patch management
Monitor and validate endpoint security
Develop security metrics and reporting and be able to articulate the metrics