ISSO Specialist

Overview

ISSO Specialist – Clearance Level: Must have a Secret Clearance or Higher to be considered. Must be a US Citizen.

• Integrate information security requirements into the acquisition process; use applicable baseline security controls as a source for security requirements; ensure a robust software quality control process; establish multiple sources (e.g., delivery routes) for critical system elements.
• Work with the ISSM on compliance activities including RMF Accreditation of several complex information systems.
• Assist in the security configuration and management of collateral classified systems and networks in various environments (Linux, Unix, Sun, Mac, Windows).
• Confirm that plans of actions and milestones (POA&M) or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization s vision and goals.
• Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
• Utilize RMF experience to recommend resource allocations required to securely operate and maintain cybersecurity requirements.
• Serve as primary author on the development and maintenance of System Security Plans (SSP) and artifacts such as the POA&M, Risk Assessment Report, and Continuous Monitoring Strategy.
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures.
• Collect, analyze, and store system audit records.
• Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
• Prepare for and participate in periodic organization compliance assessments.
• Ensure account management documentation is complete and updated.
• Maintain configuration management documentation (change tracking, maintenance logs, etc.).
• Serve as a member of the Configuration Control Board (CCB) as needed.

• Certification - Current DoD 8570 IAT Level II Certification (GSEC, Security+ CE, SSCP, CCNA-Security)
• Degree Level - Bachelor s Degree
• Clearance Level - Currently holds a Secret Clearance (OR a higher clearance)
• Demonstrated understanding of the following security frameworks: NIST 800-53 / RMF, JSIG, ICD 503, NISPOM Chapter 8, DoD Manual 5205.07 Volumes 1-4, DAAPM
• Experience with vulnerability scanning and auditing tools and processes
• Experience with multiple operating systems (Windows Server , Windows 7/10, RHEL, Ubuntu, Mac, etc.)

• Minimum 5 years of IT security experience in DoD Information Security
• Experience securing networks and systems with DISA STIGs/SRGs
• Experience with virtualization and Cloud technologies

• Work location:
  
  Huntsville
• Hybrid
  
  Schedule:
  
  Onsite 4 days/wk with one day remote
• Travel:
  Occasional travel to MA and possibly international travel
• Clearance level:
  Active Secret clearance required; US Citizen

• PTO - 15 days (vacation/sick), 10 paid holidays, 6 standard holidays, 4 floating holidays (pro-rated)
• Volunteer time off: 12 hours annually
• Tuition & Training Reimbursement — up to $5,000 annually
• 401K with company match and immediate vesting after eligibility period
• Cell Phone & Internet reimbursement up to $150 monthly
• BYOD allowance up to $1,500 after 90 days, renewed every three years

We are an Equal Opportunity Employer.