Information System Security Officer (ISSO)

Davidson has distinguished itself in the aerospace and missile defense industry with an outstanding reputation for excellence. Specifically, we're recognized for hiring noted experts, experienced engineers and scientists dedicated to designing and delivering advanced, intelligent technology solutions in defense of our Nation.

Davidson is seeking an ISSO at Fort Greely, AK.

Information System Security Officer must be able to provide Security Discipline Management and Execution for fielded assets. The candidate performs duties of Information System Security Officer for Information Systems on a Prime contractor team for classified computer operations

Job Responsibilities

• Audit Oversight, conduct System and User Audits on classified systems, ensure logged anomalies are identified and the non-repudiation for system events are met
• Account Oversight, process user accounts for mission systems IAW DOD policy, validate account access based on properly vetted credentials and need to know
• Privileged Account Oversight, validate privileged accounts IAW DODD 8140 and National Institute of Standards and Technology (NIST)
• System Configuration Oversight, assist maintainers with gathering required artifacts for any new components that may impact a system's security baseline
• System Recovery Oversight, ensure availability of on-site copies; reviewing relevant documentation to ensure disaster recovery planning and back-up procedures are implemented
• Cybersecurity (CS) and Security Policy Enforcement, implement and enforce DoD information system CS policies and procedures IAW applicable references, directives, and DOD guidelines
• Malware Protection Oversight, ensure the malware protection maintenance process in accordance with the manual for applicable systems
• Cybersecurity/Security Training, validate user security and awareness trainings as required to maintain active classified system accounts
• Process Classified Shipment, will assist in processing classified shipments to and from all remote fielded sites
• Reporting, responsible for the accurate and timely delivery of IS compliance reports, metrics, and/or presentations as needed
• Media Control Processes, support the execution of the program media control IAW DOD compliance as well as data transfer processes on behalf of MDA and in coordination with the ISSM
• Continuous Monitoring, operate and run scans from the Cybersecurity Vulnerability Assessment standalone laptop IAW standard operating procedure or on integrated Assured Compliance Assessment Solution (ACAS) system; create work orders with coordination from Integrated Product Team, system administrators, and Quality Assurance to perform system maintenance
• Incident Response, in close collaboration with the Incident Response (IR) team, direct protective or corrective measures when a CS event or incident is discovered and investigate security incidents in accordance with the GMD Incident Response and Reporting Procedures
• Vulnerability Assessment Analyst, interact with the Assessment Lead to: identify relevant threats, identify critical flaws in applications and systems, use automated tools to detect vulnerabilities and improve efficiency, use manual testing techniques to eliminate false positives and discrepancies, provide corrective action recommendations
• Additional responsibilities include compliance with security program operating procedures; storing and disposing assigned classified material; coordinating security matters with host, customer, and appropriate contractor security representatives, and support preparing and conducting security program reviews and self-inspections
• Additional responsibilities include applying secure systems architecture and design methods, processes, tools, and techniques to ensure compliance with security requirements, directs, conducts and mitigates complex risk assessments and investigations
• Some travel may be required (up to 10%)
  
  

Requirements

• Minimum of a Bachelor's degree and over 4 years' experience or a Master's degree is a plus with over 2 years' experience
• A technical degree is defined as any four year degree, or greater
• 8 years' experience may be substituted for a Bachelor's degree. Years of education may be substituted for experience
• DODD 8140 / NIST Certification is required: CompTIA Security meets the requirement
• The candidate must have extensive experience in National Industrial Security Program Operating Manual (NISTPOM)
• Must have extensive knowledge and experience using Cybersecurity processes and technology, and good working knowledge of Windows and UNIX systems
  
  

Desired Competencies/Experience/Certifications

• CISSP Certification or equivalent
• Intimate knowledge of Department of Defense (DoD) 8500 series
• Knowledge of Missile Defense Agency (MDA) programs is a plus
• Risk Management Framework (RMF) knowledge
• eMASS knowledge
  
  

Clearance Requirements

Must currently possess a Secret Security Clearance

Job Posted by ApplicantPro