Specialist, Cyber Intelligence (ISSO)

L3HHCM20•Palm Bay, FL

5d•Onsite

About The Position

The ISSO is responsible for the information system security controls and to ensure the confidentiality, integrity and availability of information systems remain at the authorized state. Abides by all applicable information system security guidance to sustain customer information systems In Accordance With (IAW) NIST SP 800-53 and any other government and local directives, instructions, or publications pertaining to the ISS Continuous Monitoring (ConMon) responsibilities.

Requirements

Bachelor’s Degree and minimum 4 years of prior relevant experience or 2 years post-Secondary/ Associates Degree and a minimum of 8 years of prior related experience. Graduate Degree and a minimum of 2 years of prior related experience
TS/SCI DoD Clearance
Minimum Security+ certification required

Nice To Haves

Experience as an ISSO supporting classified systems under the JSIG, ICD 503, and/or 32 CFR Part 117 Section 18
Explain and interpret processes and procedures to others within and outside the job area. May work to justify and gain cooperation regarding processes, practices and procedures
Practical experience running security compliance scans and interpreting vulnerability scanning results (Nessus, SCAP)
Experience completing DISA Security Technical Implementation Guidelines (STIG) checklists
Experience with Linux/Unix Information System Security requirements to include archiving audit log data

Responsibilities

Conducts internal information technology system audits and risk assessments and reports findings and recommendations for corrective actions to management.
Executes first level responses and addresses reported or detected incidents.
Investigates and analyzes all response activities related to cyber incidents.
Interprets, analyzes, and reports all events and anomalies in accordance with directives, to include initiating, responding, and reporting discovered events.
Safeguards information against unauthorized use, infiltration, exfiltration, modification, destruction, or disclosure of national security information.
Perform Continuous Monitoring of assigned information systems to include user activity monitoring (auditing) using SIEM tools or the native audit reduction capability of the operating system
Initiate, review, and remediate vulnerability and compliance scans using industry approved scanning tools (Nessus, ACAS)
Review and assess the configuration settings of assigned information systems against the DISA STIG configuration standards
Developing and updating documentation in support of obtaining or maintaining an Authority to Operate (ATO) for assigned information systems
Attend Change Control Boards (CCB) to review and approved information system change requests
Conduct and monitor security awareness training for information system users
Respond to, and investigate, security incidents and violations
Maintains appropriate cyber certifications per customer contract.