Standard Job Description

This position requires Final Secret clearance with ability to obtain Top Secret clearance.

What You Will Be Doing

As an ISSO, you will be responsible for overseeing day-to-day information system security operations partnering with the security team, program leadership, engineering teams, and government customers supporting the Conventional Prompt Strike program, which currently consists of two networks operating under separate Authorities to Operate (ATOs).  Your responsibilities will include, but are not limited to:

• Oversee day-to-day information system security operations including auditing the Information System (IS), hardware and software implementations, and Risk Management Framework (RMF) package authorizations.
• Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily RMF.
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions with the ISSM to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
• Participate in internal / external security audits/inspections; performs risk assessments.
• Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
• Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
• Ensure configuration management (CM) and IS security documentation for security-relevant IS software, hardware, and firmware is maintained and documented.
• Assist in conducting investigations of computer security violations and incidents, reporting as necessary.
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
• Communicate, implement and manage a formal Information Security Policies / Information Systems Security Program together with Cyber team and Classfiifed Program Security Represenative (CPSR).

Basic Qualifications

• Final Secret required to start
• Possess a DoD 8140 / 8570 IAT Level I / II certification (e.g., Security+CE)
• Hands on experience with industry standard Information Assurance tools 
• Demonstrated technical experience in Windows and Linux operating system security requirements
• Demonstrated experience in using basic Microsoft Office collaboration applications (e.g. Office, Outlook, Teams)
• Knowledgeable of Windows and Linux operating system security requirements

Desired Skills

• Information Systems auditing and investigations experience 
• Risk Management Framework (RMF) implementation and knowledge of the Assess & Authorize process (practical or education)
• Previous experience working with system authorization requirements and NIST 800 53 (DAAG / JSIG)
• Experience implementing / validating Secure Technical Implementation Guidance (STIG) application, system hardening, analysis, and vulnerability management
• Experience with developing, reviewing, and maintaining RMF artifacts
• Knowledge of other security disciplines and how they impact and interact with information system security
• Understanding of network concepts and Type 1 encryption devices, such as TACLANE and boundary protection devices / firewalls
• Ability to perform technical assessments for systems being presented to the government for authorization
• Ability to support multiple projects in dynamic, demanding environments
• Technical experience in Windows, Linux operating systems and command line use
• Demonstrated technical experience with industry standard Information Assurance tools (Splunk, Nessus/Tenable/ACAS, STIGViewer/SCAP Compliance Checker/eSTIG, McAfee ePO, McAfee DLP)
• Proficient in AI prompting as it applies to this position and practice