ISSO

SilverEdge•Chantilly, VA

About The Position

SilverEdge is a premier provider of innovative cyber, software and intelligence solutions addressing everyday challenges to meet mission goals across the DOD and Intel Communities and beyond. We are seeking a ISSO to join our dynamic team. The candidate will provide assistance in the following areas: Desktop hardware to include workstations, printers, multi-function devices, monitors, desktop peripherals, large displays, webcams, and a variety of other hardware devices. Voice to include networks, VoIP, analog, and digital implementations. Audio and video to include desktop VTC, integrated audio and video conference room setups (cameras, speakers, A/V switches, control panels, etc.), and multi-VTC integrated room setups. Provide Certification and Accreditation support to advise and assist the stakeholders with the Lifecycle Assessment and Authorization (A&A) process, and develop a Systems Security Plan (SSP). Concentrate on overall technical and operational effectiveness of capabilities in coordination with the GTM and Sponsor Staff management. Assisting and maintaining a formal Information Security Program that includes recommendations on continuous improvement of the processes and architectures Maintain and make accessible documentation of all operational and business process activities in the form of Standard Operating Procedures (SOPs). Assisting and maintaining a formal Information Security Program with their stakeholders. Monitor and track projects in the A&A queue. Analyze SSPs to develop an understanding of the customer's systems and applications. Coordinate A&A actions and system testing with appropriate security personnel. Develop risk assessment, recommend mitigating countermeasures, and write short, succinct risk assessment, and certification reports for submission to the Chief Information Officer (CIO). Act as an A&A project register. Manage the A&A registration process. Monitor and track projects in the A&A queue. Maintain a document repository where A&A project documentation is stored and recorded, and register actions concerning project approvals to operate in the A&A database. Assemble and submit A&A packages to the Principal Accreditation Authority or Designated Accreditation Authority. Support product selection process, approving product changes and modifications. Review and approve product requests for procurements to ensure it meets the Sponsor's security requirements. Engage in technical meetings during the Sponsor’s project engineering process to provide security guidance in terms of policy and technical implementation of those policies. Produce produce and assist with production of technical artifacts required for A&A packages such as write documentation like System Security Plan, Audit Strategy, Configuration Management Plan, Security Controls Traceability Matrix, Project Plan of Action and Milestones. Monitor and address cyber risks such as malware, zero-day attacks, denial of service attacks, as well as associated mitigations regarding computer and network devices.

Requirements

Bachelors degree in relevant field of study, 8 years of relevant experience
Active Government Clearance with Poly

Responsibilities

Provide Certification and Accreditation support to advise and assist the stakeholders with the Lifecycle Assessment and Authorization (A&A) process, and develop a Systems Security Plan (SSP)
Concentrate on overall technical and operational effectiveness of capabilities in coordination with the GTM and Sponsor Staff management.
Assisting and maintaining a formal Information Security Program that includes recommendations on continuous improvement of the processes and architectures
Maintain and make accessible documentation of all operational and business process activities in the form of Standard Operating Procedures (SOPs).
Monitor and track projects in the A&A queue.
Analyze SSPs to develop an understanding of the customer's systems and applications.
Coordinate A&A actions and system testing with appropriate security personnel.
Develop risk assessment, recommend mitigating countermeasures, and write short, succinct risk assessment, and certification reports for submission to the Chief Information Officer (CIO).
Act as an A&A project register.
Manage the A&A registration process.
Maintain a document repository where A&A project documentation is stored and recorded, and register actions concerning project approvals to operate in the A&A database.
Assemble and submit A&A packages to the Principal Accreditation Authority or Designated Accreditation Authority.
Support product selection process, approving product changes and modifications.
Review and approve product requests for procurements to ensure it meets the Sponsor's security requirements.
Engage in technical meetings during the Sponsor’s project engineering process to provide security guidance in terms of policy and technical implementation of those policies.
Produce produce and assist with production of technical artifacts required for A&A packages such as write documentation like System Security Plan, Audit Strategy, Configuration Management Plan, Security Controls Traceability Matrix, Project Plan of Action and Milestones.
Monitor and address cyber risks such as malware, zero-day attacks, denial of service attacks, as well as associated mitigations regarding computer and network devices.