What are the responsibilities and job description for the Information Systems Security Officer (ISSO) position at Atlas Technologies, Inc.?
Atlas Tech, a veteran-owned IT company serving multiple DoD customers in support of America's warfighters, is looking for an Information Systems Security Officer (ISSO) to join our team. In this role, you will play a critical part in supporting customer's mission support systems by managing risk, ensuring compliance with cybersecurity standards, and safeguarding essential information systems. As an ISSO, you will collaborate with Information Assurance teams and system stakeholders to enhance security postures, streamline accreditation processes, and maintain operational readiness for mission-critical systems. If you're passionate about cybersecurity and protecting systems that enable national security, we encourage you to apply.
Pay band: $125,000 - $155,000 varies with experience
Travel: Up to 10%
You Will:
- Support the customer's mission-critical systems by managing risk and ensuring compliance with cybersecurity standards, including NIST SP 800-53.
- Collaborate with ISSOs to conduct information security research, perform system vulnerability analyses, and produce comprehensive risk assessments.
- Monitor and manage the Enterprise Mission Assurance Support Service (eMASS) to track and maintain Plans of Action and Milestones (POAMs) and Authority to Operate (ATO) statuses, including their creation, updates, closure, and reporting.
- Review Security Technical Implementation Guides (STIGs), coordinate remediation efforts, and provide technical guidance on STIG-related inquiries.
- Conduct vulnerability scans using tools such as ACAS and SIEM to assist in documenting security controls and improving system cybersecurity hygiene.
- Coordinate responses to Customer Tasking Orders and ensure accountability for system vulnerabilities and compliance mandates.
- Update contingency plans and cybersecurity documentation for MSSPL systems, resolving POAMs and advancing system compliance goals.
- Lead meetings with Customer system ISSOs, providing weekly system progress updates and cybersecurity hygiene status to the NIWC Product Line.
- Contribute to assessments such as Mini-Analyses of Alternatives (Mini-AoAs) for system upgrades and accreditation processes.
Must Have:
- Education and Certification: A bachelors degree in Cybersecurity, Information Technology, or a related field.
- COMPTIA Security (CE) certification or higher is required.
- At least three years of experience in Information Assurance, Risk Management Framework (RMF), and cybersecurity practices.
- Proficiency in cybersecurity tools like eMASS, ACAS, SIEM, and vulnerability management systems.
- Knowledge of NIST SP 800-53 controls and security standards.
- Familiarity with Security Technical Implementation Guides (STIGs) and remediation processes.
- Strong communication, collaboration, and documentation abilities to engage with ISSOs, stakeholders, and team members effectively.
- Capability to adapt to evolving cybersecurity requirements and customer needs.
- Commitment: A proven record of contributing to cybersecurity compliance, system risk management, and ensuring the successful authorization of systems for secure operation.
Salary : $125,000 - $155,000