What are the responsibilities and job description for the Information Systems Security Officer (ISSO) position at Chenega MIOS?
Req ID: 34793
Summary
Information Systems Security Officer (ISSO)
Arlington, VA
Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!
We deliver essential technology services to our customers in support of their missions to sustain the national security and economic interests of our nation. SecuriGence is seeking an Information Systems Security Officer to help contribute to our success. Help us solve problems with Innovation Through Intelligence.
Responsibilities
- Provide oversight for the assigned network(s) by working with operation staff to ensure compliance per STIGs and IAVM.
- This role requires being onsite five days a week during the initial training period of approximately two months. Telework is then allowed one day per week.
- Ensuring that Stakeholders adhere to Federal Information Assurance policies and procedures to acquire and maintain an Information System's Authority to Operate (ATO) under The Federal Information Security Management Act (FISMA) of 2002.
- Lead RMF A&A efforts including but not limited to: activities within the A&A cycle and ISSO functions, work directly with ISSM, ISO, SCA, and AO, work with engineering and operations support staff to secure systems and ensure compliance, and provide oversight for existing and new POAMs.
- Provide POA&M support by advising CISO/AO of changes and assisting in the coordination of efforts to remediate deficiencies and vulnerabilities.
- Performing ConMon reviews for daily, weekly, monthly, and quarterly checks. (Primarily completed through Splunk. Small number of manual/administrative checks).
- Assist with Incident Response (IR) activities by verifying sanitation procedures are followed prior to submitting the CART Case to the CISO for closure.
- Work with the Security Tools Team to identify Critical / High vulnerabilities for remediation and report network security posture at weekly CISO/AO meetings.
- Create, maintain, and enforce overarching policy documents to ensure continuity and compliance within the organization.
- Other duties as assigned.
Qualifications
- Bachelor's degree
- Can be substituted for Associate's degree with 2 years relevant experience OR 4 years relevant experience
- 5 years relevant experience
- DoD Top Secret Clearance is required
- IAT Level II Certification minimum
Knowledge, Skills, and Abilities:
- Experience with NIST SP 800-37, 800-137, 800-53 rev 4/5, 800-39, 800-171 and 800-171A for self-assessments; NIST 800-100, NIST 800-18.
- Familiar with creating Assessment and Authorization (A&A) packages in eMASS and/or Xacta and applying security categorization per the NIST FIPS 199 and NIST SP 800-60.
- Experience in performing and assessing Security and Privacy Controls per NIST 800-53 rev 4/5 and NIST 800-53a guidelines.
- Experience with systems engineering design and development toward a "baked-in" security design using Information Assurance best practices.
- Understanding of vulnerability and scanning tools such as Assured Compliance Assessment Solution (ACAS) and well-versed in interpreting risk posture resulting from assessment reports.
- Knowledge of vulnerability management, risk management, and project management, proficient with Microsoft products - Word, Excel, PowerPoint.
- Experience with Tenable's Nessus and/or Security Center, or Network Mapper is a plus.
- Risk assessment experience, especially with NIST SP 800-53 Threat identification, system security categorization, gap analysis, and compliance reporting.
- Must be able to validate security patches as they align with NIST guidelines, client policies and procedures, and OMB Mandates.
- Experience with creating or maintaining security artifacts as part of the ATO package including but not limited to; System Security Plans (SSP), Contingency Plans (CP), Disaster Recovery Plans (DRP), Plans of Action, and Milestone (POA&M), Incident Response (IR), and other security documentation.
How you’ll grow
At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn.
We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.
Benefits
At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.
Learn more about what working at Chenega MIOS can mean for you.
Chenega MIOS’s culture
Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.
Corporate citizenship
Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.
Learn more about Chenega’s impact on the world.
Chenega MIOS News- https://chenegamios.com/news/
Tips from your Talent Acquisition Team
We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:
Chenega MIOS web site - www.chenegamios.com
Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI\_IE369514.11,23.htm
LinkedIn - https://www.linkedin.com/company/1472684/
Facebook - https://www.facebook.com/chenegamios/
Chenega Corporation and family of companies is an EOE.
Equal Opportunity Employer/Veterans/Disabled
Native preference under PL 93-638.
We participate in the E-Verify Employment Verification Program