Experience required
- Bachelor's: 10+ years
About the role
Information Systems Security Officer 2 - (NIST RMF, SSP, C&A)
Clearance: TS/SCI - Polygraph required Position ID: 21-2-ISSO2
Description:
Provide support for a program, organization, system, or enclave’s Information Assurance (IA) program. Maintain the operational security posture for information systems and support security authorization activities in compliance with the NIST Risk Management Framework (RMF) and ODNI/DoD policies.
- Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
- Maintain records and operational security posture for workstations, servers, routers, firewalls, intelligent hubs, and network switches.
- Prepare, review, and update documentation including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
- Perform vulnerability/risk assessment analysis and evaluate security solutions to ensure compliance with classified processing requirements.
- Manage configuration management (CM) for security-relevant hardware, software, and firmware, and assess the security impact of system changes.
- Administer user identification and authentication mechanisms and support the Information System Security Manager (ISSM).
Qualifications
- NIST RMF, NISCAP, ODNI, and DoD security policies
- SSP, C&A, and SRTM documentation creation and maintenance
- System security evaluation and risk/vulnerability assessment
- Configuration Management for security software/hardware/firmware
- User identification & authentication administration
- Experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
- DoD 8570 compliance with IAM Level I or higher
Experience: Ten (10) years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Education: Bachelor’s degree in Computer Science or a related discipline from an accredited college or university.
Four (4) years of additional ISSO experience may be substituted for a Bachelor’s degree.
Must include experience in at least two (2) of the following: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools.
Certifications: DoD 8570 compliance with IAM Level I or higher required.
Salary Range: $174k-$213k (Annually)
Compensation
Posted Annualized Salary: $174,000 – $213,000