ISSO/ISSE

Leidos

1d•$107,900 - $195,050•Remote

About The Position

The DoW Healthcare Management System Modernization (DHMSM) Program is seeking an experienced ISSO/ISSE to support the continued development, sustainment, and deployment of the Military Health System (MHS) GENESIS system. MHS GENESIS is deployed globally at more than 3,700 locations and 138 Medical Treatment Facilities, serving 190,000 users and providing more than 1,100 clinical workflows for nearly 10 million beneficiaries. The role supports Cybersecurity Leads with Risk Management Framework (RMF) authorization and sustainment activities for assigned systems, including Interim Authorization to Test (IATT), Authority to Operate (ATO), Annual Security Review (ASR), Risk Assessment, and Continuous Monitoring. The position is remote, with work required to be completed within the United States. U.S. citizenship and the ability to obtain a Secret clearance are required; the success factors specify an active Secret clearance or higher.

Requirements

Bachelor of Science degree and 8–12 years of prior relevant experience.
U.S. citizenship and an active Secret clearance or higher; stated as a contract requirement.
At least 5 years of hands-on experience on Defense Health Agency projects in a cybersecurity role.
DoW 8570 certification.
Proficiency in eMASS.
Prior experience with DoW accreditation and tools such as eMASS, ACAS, CMRS, and HBSS.
Knowledge of networks, cyber defense toolsets and processes, networking technologies, operating systems, and security tools, tactics, techniques, and procedures.
Attention to detail.
Excellent written and verbal communication skills, with the ability to work effectively with internal team members, vendors, and clients.
Experience conducting network and network security assessments and documenting results using NIST SP 800-53A (Rev. 5), completing security plans, and recommending security controls for federal information systems.
Ability to document recommendations for correcting security weaknesses identified in assessments and track implementation of corrective actions.
Experience developing network and network security policies, system security documentation, and procedures.
Experience with the DoW Information Assurance Vulnerability Management (IAVM) Program.
Experience with cloud and containers.
Scripting knowledge in PowerShell, Python, and shell scripting.

Nice To Haves

PMP certification.
A high degree of proficiency in eMASS.
DHA A&A experience.
Proficiency in ACAS/NESSUS and SCAP.
Experience with cloud.
Experience with containers.
Experience with the DoW Information Assurance Vulnerability Management (IAVM) Program.

Responsibilities

Maintain RMF authorizations for assigned ATOs, including IATT, ATO, ASR, Risk Assessment, and Continuous Monitoring activities, and assist team members with unassigned ATOs as needed.
Conduct primary cybersecurity reviews of system architecture and technical artifacts, including PPSM, diagrams, STIGs, compliance evidence, and policy documentation.
Develop and update cybersecurity policies, procedures, and related documentation in coordination with Cybersecurity Leads and LPDH partners.
Ensure assigned systems meet requirements to obtain IATT, ATO, and ASR authorizations and approvals from the assigned Authorizing Official.
Keep current with DoW and DHA RMF policies, procedures, guidance, and changes.
Maintain eMASS records in accordance with DHMHSM and DHA requirements.
Assist with developing templates and recommending tools to support risk management and ATO activities.
Coordinate with CyberOps to ensure assets are scanned properly, resolve scan issues promptly, and track issues.
Develop and maintain Plans of Action and Milestones (POA&Ms) and Risk Acceptances for assigned ATOs, and ensure POA&Ms received from other teams meet DHA requirements.
Track vulnerability remediation statuses and POA&M closures weekly for metrics reporting.
Periodically evaluate the effectiveness of RMF security-control assessment procedures to ensure the operational security posture is maintained.
Support cybersecurity compliance assessments with systems engineering and documentation support.
Ensure DoW and DHA cybersecurity documentation is current and accessible to properly authorized individuals.
Assist Cybersecurity Leads in ensuring the project meets identified milestones and requirements.
Contribute to cyber strategies and associated documentation.
Ensure users have the required security clearances and access authorization.
Provide subject matter expertise in response to customer inquiries.