Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. 

The candidate must have experience with the development, implementation, and maintenance of Windows and Linux Servers/Clients, PC Desktops, network devices and supported applications. Successful Candidates will have a thorough understanding of the US Government system accreditation process under Risk Management Framework (RMF). This may include one or more of the following guidance directives: DoDI 8500.01, NIST SP 800-37, NIST SP 800-53, and Committee on National Security Systems Instruction (CNSSI) 1253. The ISSO will be responsible for systems security, testing and system accreditation activities for multiple training platforms.

Successful candidates will require a strong background in Assured Compliance Assessment Solution (ACAS) and vulnerability scanning, development of the system security plan, maintaining the Plan of Action and Milestones (POAM), and other security related processes to include part sanitization procedures, vulnerability scanning, and virus scanning. The candidate will perform routine security scans and provide engineering level research when requested. The candidate will apply information technology security principles and configure security settings, apply security patches and conduct media reviews. Assist in the development and implementation of government approved information security procedures and plans for the operation of multiple networked systems and coordinate government agency approvals. Consult on the design, development, integration, and analysis of classified computing systems with the programs and information systems security manager (ISSM). Assist with self-inspection reviews. Assist in conducting comprehensive investigation of computer security incidents, coordinating with other organizations for expertise.

Basic Qualifications

• Interim Secret Clearance.
• DoD IAT Level II certification: CCNA Security, CSA+, GICSP, GSEC, Security + CE, or SSCP is required before applying.
• Experience with the NIST SP800-53 Security Controls.
• Experience with the continuous monitoring of system security controls.
• Must be able to build and maintain effective team and customer relationships.
• Ability to manage multiple projects in a dynamic, demanding environment.
• Knowledge of other security disciplines and how they impact and interact with information system security.
• Possess strong written and verbal communications, interpersonal relations, organizational, troubleshooting, and analytical skills

Desired Skills

• Extensive experience with: Nessus, Security Center, STIGs, etc.
• Experience with NISPOM and RMF certification and accreditation processes.
• Experience working with classified information systems.
• Ability to work independently without appreciable direction.
• Keen attention to detail and adherence to established security policies.
• eMASS experience.
• Prior ISSO/ISSM experience.
• Understanding of networking concepts and cybersecurity related tools to include, Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Security Content Automation Protocol (SCAP), and vulnerability scanners.