Description:

Job Title: Information System Security Officer (ISSO)

Job Code: SAS20222207-87293

Job Location: Rochester, NY

Job Description:

Experienced Information System Security Professional (ISSO) with strong cybersecurity knowledge, who can work under the supervision of a Information System Security Manager (ISSM). This individual will work closely with fellow ISSOs, information systems security engineers, systems administrators and program engineers to enforce cybersecurity processes, practices, and procedures required to obtain and maintain ongoing authorizations and accreditations.

The ISSO ensures changes or other enhancements to information systems and related processes are inline with established information security policy and procedure. The ISSO has the ultimate responsibility for the day-to-day security operations of complex enterprise environments. This candidate must be knowledgeable in information technology, information system security, and the Risk Management Framework as it relates to various governance documents (DAAPM, JSIG, etc.).

Essential Functions:

• Maintaining Body of Evidence (BOE) artifacts in support of Assessment & Authorization (A&A) of assigned systems in accordance with Risk Management Framework (RMF).
• Information System Auditing
• Assist ISSM in performing security control assessments.
• Monitoring information system configuration management.
• Working with ISSM and IT professionals to organize and develop device and system hardening guides following DISA, NIST and other applicable guidelines.
• Conducting periodic hardware/software inventory assessments.
• Conducting continuous monitoring activities on assigned information systems.
• Assiting in the investigation of security incidents such as data spills and malicious events compromising sensitive information.
• Enforcing information security policy and procedures developed by the ISSM to maintain the compliant security posture of the information systems in their area of responsibility.

Qualifications:

• Bachelor's Degree and a minimum of 4 years of prior related experience. Graduate Degree with a minimum of 2 years of prior related experience.
• Active TS/SCI security clearance (w. CI Polygraph preferred)
• Minimum DoD 8570 Baseline Certification IAM Level I; i.e. Security+ or the ability to obtain within 6 months of hire.

Preferred Additional Skills:

• 3+ years' experience as an ISSO supporting or managing cybersecurity on classified systems.
• Experience with the Risk Management Framework; reducing risk to an acceptable level through the skilled implementation of security controls (NIST SP 800-37)
• Continuous Monitoring of Security Controls (NIST SP 800-53)
• Experience monitoring and providing evidence to close POA&Ms associated with the A&A and project management processes.
• Experience with government sponsored cloud-based environments.
• Experience with Windows and Linux based operating systems.
• Experience reviewing information system security logs and operating auditing tools.
• Experience with DISA STIGs and SCAP Compliance Checker.
• Experience interpreting vulnerability scanning results (Nessus, ACAS, etc.).

Job Profile Matching Criteria:
Expertise Security--Cyber Intelligence Location USA - NY - Rochester