Information Assurance Security Professional - DoD Secret

• As a member of the Information Assurance Security team the ISSO supports system security categorization efforts, security requirements selection/analysis, security control assessments and performs continuous monitoring.
• Executes or supports the execution of A&A activities, including development of required security documentation, including items such as System Security Plans, Security Assessment Reports, SCTM's and POA&M's in compliance with IA policy
• Perform weekly system audit reviews, media reviews, hardware/software configuration management
• Executes security testing and evaluation to ensure correct implementation of security controls
• Supports the assessment and mitigation of vulnerabilities throughout a systems life cycle
• Conduct IA security education training for all system users on appropriate risk mitigation strategies
• Perform incident response and cleanup actions when necessary per company or customer directions
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and procedures outlined in the System Security Plan (SSP).
• Assume ISSM responsibilities as assigned by the Region Manager and/or in the absence of the ISSM

• Proficient understanding of cyber security specifications such as Risk Management Framework (RMF), JSIG (Joint SAP Implementation Guide), ICD-503, NIST SP 800-53
• Experience implementing government security requirements to include technical computer/network system auditing
• Trained and proficient in Assured File Transfer (AFT) processes and tools
• Experience with various security assessment/hardening tools - STIGs, SCAP, ACAS, Nessus, etc.
• Systems administration experience is highly desirable
• Very strong writing, speaking, analytical, and customer service skills
• Ability to participate in or lead security work groups
• Must be a self-starter capable of multitasking and efficiently managing your time in a dynamic environment while requiring minimal levels of supervision
• Maintains contact with external customer security professionals

• Demonstrated comprehensive knowledge of the NISPOM, JSIG, ICD-503, NIST SP 800-53 and CNSSI 1253
• DoD 8570 IAM-I level professional certification (i.e. Security + CE, CAP, GSLC) or ability to obtain within six (6) months of hire

Last updated on Nov 13, 2023