ISSO

TekSynap•Fort Belvoir, VA

3d•$105,000 - $125,000•Onsite

About The Position

We are seeking an ISSO to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

Requirements

Top-Secret clearance required with SCI or SCI eligibility.
DoD 8570 IAM Level II or III compliant certification and computing environment certifications required.
Ten (10) or more years of experience.
BS/BA
Very strong technical experience on Microsoft.
Expert with RMF accreditation packages.
Experience in all steps of the RMF process.
Expert in evaluating security controls and compliance on a variety of hardware and software systems.
Expert with eMASS.
Ability to work effectively independently as well as within a team environment.
Experience with writing SSPs
Must be a US Citizen
Must possess and maintain an active Top Secret security clearance with SCI eligibility.

Responsibilities

Coordinate A&A kickoff meeting for authorizations and reauthorizations.
Provide data categorization guidance to system owners.
Provide DoD Information Technology Portfolio Repository (DITPR) and eMASS registration guidance to system owners.
Provide security control selection and monitoring strategy guidance to system owners.
Perform security plan reviews for approval (RMF Step 2 approval).
POA&M Management (status, mitigations, and remediation strategies) oversite.
Risk acceptance reviews and recommendations to the Authorizing Official.
Running ACAS scans, SCAP scans and manually going through STIG checklists.
Conducting required vulnerability analysis to support mitigation and residual risk determination.
Supporting the continuous monitoring program as necessary when Information System Continuous Monitoring (ISCM) results will be used to support continuing authorization requirements or ongoing authorizations.