Mid-Level ISSO

ClearFocus Technologies•Lakewood, CO

7d•Remote

About The Position

ClearFocus Technologies, a HUBZone certified company, is located in Leesburg, VA. We specialize in cybersecurity and support multiple government and commercial clients for a variety of missions. We value our clients, integrity and employees and believe a single person can make a difference! We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more! We are seeking a candidate for an ISSO opportunity that PART-TIME in Denver, Colorado. The following high-level tasks identify the most significant efforts required of the ISSO, however the roles cover a breadth of additional work as required in NIST 800-37, NIST 800-53, and the equivalent ICD documents for classified systems.

Requirements

4+ years of experience of Information Assurance or Cybersecurity experience.
Top Secret and SCI/Q eligibility
Bachelor’s degree or higher

Responsibilities

Obtain Authority to Operate (ATO) for new enclave within FNE
Maintain ATO for new enclave within FNE
Update System Security Plans (SSP) and other required documentation in Xacta
Conduct vulnerability assessments and coordinate remediation actions
Develop Plans of Action and Milestones (POAM) to mitigate risks, or document risk acceptance
Maintain list of Ports, Protocols, and Services (PPS) for systems
Update system documentation when changes occur
Conduct significant security change reviews for systems as new sites come online
Review security audit logs
Review, vet, and approve hardware and software additions and changes to the system
Coordinate with and CYSOC on security events, incidents, and response actions
Conduct and facilitate data transfers for the enclave
Communicate and coordinate with Lab and Site ISSO and ISSM staff for enclaves.
Develop Interconnection Security Agreements (ISA) as needed
Support required security training and administrative paperwork including Rules of Behavior, Removable Media training, and other mandatory training and agreements for system access.