Lead Information Systems Security Officer

• Lead a team of ISSOs to support mission.
• Perform ISSO responsibilities, including acting as a point of contact and subject matter expert for all cybersecurity related aspects to the assigned information systems, ensuring systems are maintained per security policies and procedures and maintaining compliance and ongoing reporting to management.
• Conduct regular briefings with the customer on cybersecurity status, including preparing briefing materials.
• Work closely with government Information Assurance team to support Authorization to Operate (ATO) accreditation conditions and requirements. Coordinate and support site visits / audits, including System Readiness Reviews (SRR) and Site Assistance Visits (SAV).
• Author, review, coordinate and submit required artifacts to eMASS (including change requests) to achieve milestones such as Interim Authority to Test (IATT) and ATO in accordance with the project schedule.
• Submit and gain approval of Ports, Protocols and Services Management (PPSM) updates, including CLSA and exception form submissions.
• Develop and update assessment and authorization documentation (Body of Evidence) for management and continuous monitoring of information systems.
• Procedures (TTP), Plan of Action and Milestones (POA&M) and Federal Information Security Management.
• Perform information system Assessment and Authorization planning, testing, assessing and liaison activities, including security scans, scan results analysis and audit trail log reviews. Document scan results and findings according to NIST Risk Management Framework (RMF) processes.
• Conduct regular privileged user management reviews. Evaluate software and hardware during pre-acquisition phases to determine its ability to meet minimum security requirements based on NIST SP 800-53 security controls.
• Assist with the implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
• Conduct ongoing security reviews and tests of systems to verify security features and controls are functional and effective. Take corrective action to resolve identified vulnerabilities.

• Bachelor’s Degree and 8 years of experience.
• OR A High School diploma or General Educational Development (GED) credential and a minimum of five (5) years of work experience may be substituted for an Bachelor’s degree.
• DoD 8570.1M relevant security certification (i.e., Security or equivalent) required or ability to obtain within 90 days of hiring.
• Strong communication skills that enable proactive and effective collaboration with a virtual team, including the ability to clearly articulate status and present to both customers and program leadership.
• Open to occasional travel to Fort Meade, MD or Letterkenny Army Depot Chambersburg, PA for site and system access. 
• Must have an active DOD Secret security clearance

• Vulnerability assessment and analysis experience utilizing ACAS/NESSUS and DISA STIGs.
• Experience with DoD implementation of the Risk Management Framework (RMF) and governing directives (NIST, CNSS, DSS, etc.).
• NIST RMF Assessment and Authorization (A&A) experience.
• Experience with operating IT security tools, such as ACAS, HBSS, DISA STIGs.
• Cloud/AWS accreditation experience.
• Prior experience working Cybersecurity in accordance with US Government.

Salary : $200 - $160,000