Sr. Computer Engineer ISSO

Amentum•Washington, DC

2d•$110,000 - $150,000•Onsite

About The Position

Amentum is seeking a Sr. Information System Security Officer (ISSO) to support Program Offices within the Department of War Strategic Systems Programs (SSP). The ISSO will provide support for non-enterprise information systems of large-scaled programs of record (POR) and multiple Science and Technology (S&T) programs. This role requires direct support to the Program Office Technical Lead onsite at NSWC Crane, with regular travel expected to SPHQ or Field Activities. The System ISSO is responsible for maintaining the appropriate operational Cybersecurity posture for assigned systems, defining system-level security objectives for implementation, and assisting in the creation of security authorization packages.

Requirements

Bachelor of Science Degree in Cybersecurity, Computer Science, Computer Engineering or equivalent
5+ years of relevant experience
CompTIA Security+ or equivalent certification
Ability to collaborate with large and highly competent technical teams.
Strategic high-level thinking
Ability/experience with planning an initiative involving large-scale, networked systems.
Must have the ability to obtain and maintain a TS/ CNWDI US Government Clearance.
Interim Secret clearance required to start.
US Citizenship is required to obtain a Secret/ TS/ CNWDI Clearance.
Willing and able to travel 40% or more.

Nice To Haves

10+ years of relevant experience
Graduate degree in Cybersecurity
Certified Information Systems Security Professional (CISSP) certification
Certified Information Security Manager (CISM) certification
Active Top Secret Clearance
Military and Department of War Strategic Systems Programs (SSP) experience is a plus

Responsibilities

Ensure systems are accredited and standard operating procedures include required security procedures.
Ensure systems are operated and maintained within the accepted level of residual Cybersecurity risk.
Ensure Cybersecurity documentation is developed, maintained, and updated as required.
Implement SSP responses to DoW IAVAs and IAVBs.
Initiate investigative procedures for security events and institute protective or corrective measures when a security incident or vulnerability is discovered.
Report Cybersecurity incidents in conjunction with the User Representative (UR) to the branch ISSM.
Work with URs to ensure incident response plans and contingency plans are developed and tested prior to system operation and annually thereafter, with results documented in the Security Authorization Package.
Participate in all engineering reviews for systems under their cognizance.
Implement security controls in alignment with the Risk Management Framework (RMF).
Document security measures.
Oversee the security posture of information systems operating under Interim Authorization to Test (IATT).
Prepare authorization packages.
Work with various stakeholders to ensure system security.
Collaborate with System Administrators to ensure security configurations, patches, and access controls are implemented and maintained during testing.
Develop requirements for large-scale or service-specific pilot projects.
Support the Program Office's DoW Acquisition process in the development of Objective Quality Evidence (OQE) (e.g., Cyber Security Strategy, GAO responses, Clinger Cohen Act, Cyber Test & Evaluation Strategy, etc.) for multiple programs, in compliance with SSP Regulations.
Support the Program Office Technical Lead as needed, identifying issues and action items, documenting OQE, and participating in ISSO discussions.
Provide customer interactions with Program Offices and associated contractors/subcontractors via teleconferences and on-site meetings.
Interface with the SSP Functional Authorizing Official (FAO, formerly AODR).
Coordinate and collaborate with stakeholders, including SSP representatives and contractors/subcontractors through assessments, subject matter expert input to proposals, technical interchange meetings, status teleconferences, email correspondence, and other meetings as required.
Support development of technical presentations and provide comments on technical content.
Develop System Security Plans detailing the security controls implemented for each information system.
Work with SSP programs to develop and maintain lifecycle plans.
Oversee the application of Security Technical Implementation Guides (STIGs) and ensure vulnerability scans are completed in a timely manner.
Evaluate performer deliverables and presentations.