The candidate will be responsible for security architecture and systems engineering supporting projects (primarily MFAMS, TITUS and JBlocks). The ISSO will provide guidance to the team to support system accreditation (IATT and ATO).
ISSO tasks include:
- Develop and maintain System Security Plans (SSPs).
- Work with ISSM and DAOs to ensure systems obtain and maintain accreditation.
- Apply continuous monitoring techniques to evaluate the systems security posture
- Create tasking for developers and system administrators as changes and patching are required.
- Ensure security policies, practices, and procedures are implemented.
- Track Plans of Actions and Milestones (POA&M)
- Review Audit Logs
- Perform Data transfers.
- Experience with:
- The ICD 503/NIST 800-53 certification and accreditation process
- The Risk Management Framework
- Developing and maintaining SSPs
- IAVA review and handling
- Interpreting Security Scan results
- Interfacing with System Administrators and Software Engineers
- Task tracking systems (e.g. Jira, Redmine, ServiceNow)
- Understands:
- Public Key Infrastructure-based authentication
- A variety of security policies, especially within the IC
- fundamentals of technical security risk assessment
- Understands how to perform analysis of alternatives
- Able to clearly communicate ideas and status updates to management and other stakeholders.
Skills Required
- Experience with the ICD 503/NIST 800-53 certification and accreditation process
- Experience with the Risk Management Framework (RMF)
- Experience developing and maintaining System Security Plans (SSPs)
- Experience with IAVA review and handling
- Experience interpreting security scan results
- Experience interfacing with System Administrators and Software Engineers
- Experience with task tracking systems (Jira, Redmine, ServiceNow)
- Understanding of Public Key Infrastructure-based authentication
- Understanding of a variety of security policies, especially within the IC
- Fundamentals of technical security risk assessment
- Ability to perform analysis of alternatives
- Able to clearly communicate ideas and status updates to management and stakeholders
What We Do
Applied Integrated Technologies, Inc. (AIT) is dedicated to providing specialized services in the Cyber Security, Information Technology, Intel Analysis, and Linguist Services markets. By combining a strong background in systems engineering and IT solutions with experienced operational analysts and linguists, AIT is able to assist our customers by implementing creative and innovative solutions. We do this by utilizing the latest technological advancements and proven methodologies to support our customers’ specific mission requirements. Established in August 2001, AIT is a small business that develops large business solutions while maintaining an agile and responsive approach. Headquartered in the Baltimore/ DC Metropolitan Area, AIT is rapidly expanding throughout the United States and overseas, currently supporting customers in Maryland, Virginia, Texas, Georgia, Utah, Washington, Oregon and various overseas locations.
