Job Requirements
Maxwell AFB Gunter Annex, AL
Top Secret/SCI Polygraph not specified
Mid Level Career (5+ yrs experience)
$90,000 - $125,000
Job Description
We have two of these roles open. Must have TS/SCI or TS SCI elligible. Must have the CAP or CGRC cert to be considered (this is a government requirement)
iSSO II -$90-95K
ISSO III -$120-$125K
ISSO II
Responsibilities
Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards. Implements the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
Audit systems to ensure security posture integrity.
Conduct assessments and test/analysis data to document state of compliance with security requirements.
Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
Conduct periodic hardware/software inventory assessments.
Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
Manage assigned team to facilitate effective execution of Risk Management Framework (RMF). Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.
Qualifications
3+ years experience in a cyber security or information assurance role. HS diploma or GED. Must hold one of the following IAM I certifications: Security+, CASP+/SecurityX, CCISO, CCSP, Cloud+, GSEC, and/or SSCP. Must hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification. Must have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS). Experience with DoD cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. NIST SP 800 series, CNSSI 1253. Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs. Experience in assessing and documenting test or analysis data to show cybersecurity compliance. Experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, PPS. Outstanding communication skills across all levels of the organization. Must be a US citizen and hold a current Top Secret clearance with SCI Access (TS/SCI).
ISSO III
Responsibilities
Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards.
Implement the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
Audit systems to ensure security posture integrity.
Conduct assessments and test/analysis data to document state of compliance with security requirements.
Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
Conduct periodic hardware/software inventory assessments.
Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
Manage assigned team to facilitate effective execution of the RMF.
Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.
Qualifications
5+ years experience in a cyber security or information assurance role including at least 3 years supporting the RMF. HS diploma or GED. Must hold one of the following IAM II certifications: CISM, CISSO, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GICSP, and/or GSLC. Must hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification. Must have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS). Additional certifications such as CCNA or Microsoft Certified: Information Security Administrator Associate preferred. Experience with DoD cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. NIST SP 800 series, CNSSI 1253. Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs. Experience in assessing and documenting test or analysis data to show cybersecurity compliance. Experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, PPS. Outstanding communication skills across all levels of the organization. Must be a US citizen and hold a current Top Secret clearance with SCI Access (TS/SCI).
iSSO II -$90-95K
ISSO III -$120-$125K
ISSO II
Responsibilities
Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards. Implements the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
Audit systems to ensure security posture integrity.
Conduct assessments and test/analysis data to document state of compliance with security requirements.
Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
Conduct periodic hardware/software inventory assessments.
Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
Manage assigned team to facilitate effective execution of Risk Management Framework (RMF). Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.
Qualifications
3+ years experience in a cyber security or information assurance role. HS diploma or GED. Must hold one of the following IAM I certifications: Security+, CASP+/SecurityX, CCISO, CCSP, Cloud+, GSEC, and/or SSCP. Must hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification. Must have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS). Experience with DoD cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. NIST SP 800 series, CNSSI 1253. Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs. Experience in assessing and documenting test or analysis data to show cybersecurity compliance. Experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, PPS. Outstanding communication skills across all levels of the organization. Must be a US citizen and hold a current Top Secret clearance with SCI Access (TS/SCI).
ISSO III
Responsibilities
Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards.
Implement the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
Audit systems to ensure security posture integrity.
Conduct assessments and test/analysis data to document state of compliance with security requirements.
Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
Conduct periodic hardware/software inventory assessments.
Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
Manage assigned team to facilitate effective execution of the RMF.
Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.
Qualifications
5+ years experience in a cyber security or information assurance role including at least 3 years supporting the RMF. HS diploma or GED. Must hold one of the following IAM II certifications: CISM, CISSO, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GICSP, and/or GSLC. Must hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification. Must have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS). Additional certifications such as CCNA or Microsoft Certified: Information Security Administrator Associate preferred. Experience with DoD cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. NIST SP 800 series, CNSSI 1253. Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs. Experience in assessing and documenting test or analysis data to show cybersecurity compliance. Experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, PPS. Outstanding communication skills across all levels of the organization. Must be a US citizen and hold a current Top Secret clearance with SCI Access (TS/SCI).
group id: 10508920