Information Assurance Engineer (ISSO II)
Location
Fort Belvoir, VA | United States
Job description
Fort Belvoir, VA
Requires US Citizenship
Employment Term and Type: Regular, Full Time
Required Security Clearance: TS/SCI CI Polygraph
Required Education: B.S of Arts or Science
Responsibilities Support INSCOM Cyber Security Support Services (ECSS) as an Information Systems Security Officer (ISSO) in instantiating an enterprise approach for federated cybersecurity. Provide ISSO services to the Risk Management Branch, Cybersecurity Division, INSCOM G6. Serve as lead ISSO for a portfolio of systems ranging from business, intelligence, cloud, and finance located on the NIPRNet, SIPRNet, and JWICS. Assist respective Information System Security Managers (ISSM) in providing CS. ISSO services also include security incident handling for unauthorized disclosures of classified information (UDCI) on the supported networks.
General Duties: Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems. Conducts RMF support services to include implementation of the Security Technical Implementation Guide (STIG) security settings. Leverages ARCYBER and industry best practices and emerging capabilities.
Tasks include:
- Designs, develops, and implements security requirements within an organization’s business processes.
- Prepares documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework) to provide effective security controls (as defined in NIST 800-37).
- Prepares test plans.
- Provides assessment and authorization (A&A) support.
- Develops and completes system security plans and contingency plans.
- Performs vulnerability assessments including development of risk mitigation strategies.
- Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
- Recommends system enhancements to improve security deficiencies.
- Develops, tests, and integrates security tools.
- Conducts security program audits and develops solutions to lessen identified risks.
- Develops strategies to comply with privacy, risk management, and e-authentication requirements.
- Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
- Evaluates, develops, and enhances security requirements, policy, and tools.
- Ensures artifacts are properly maintained in eMASS and tracked to ensure timely management and implementation of updates.
- Assist system development teams to prepare required RMF authorization artifacts as directed by the engineers and ISSM throughout the System Engineering Lifecycle process
- Assist System Owners to achieve Action & Milestones (POAM), update POAM status reports, and track and remediate security vulnerabilities.
- Contributes to routine reports on ATO status and system cybersecurity compliance.
Qualifications Requires 10 to 12 years with BS/BA or 8 to 10 years with MS/MA or 5 to 7 years with PhD. Will consider: Edu/Exp: HS 16+ Years, BA/BS 10+ Years, or MA/MS 8+ Years.
- Experience designing, developing, implementing, and enforcing security requirements.
- Expertise preparing Security Test and Evaluation plans.
- Experience providing certification and accreditation support.
- Experience developing security plans, contingency plans, and conducting vulnerability assessments.
- Skilled in implementing mitigations to risks identified during security audits.
- Experience preparing artifacts IAW RMF.
- Experience managing documentation in eMASS.
-
- Required:
- IAM Level I DOD 8570 certification
This position description is not intended as, nor should it be construed as, exhaustive of all responsibilities, skills, efforts, or working conditions associated with this job. This and all positions are eligible for organization-wide transfer. Management reserves the right to assign or reassign duties and responsibilities at any time.
Company Overview: Athena Technology Group, Inc. (ATG) is a Service-Disabled Veteran Owned Small Business (SDVOSB) focused on Information Technology and Communications consulting, system engineering, integration, deployment, and operation of state-of-the-art command and control and information systems that deliver critical network centric solution to the warfighter. With a proven track record of technical support to our customers, we are looking for innovative industry professionals to join our team.
ATG offers a generous compensation package including health, dental, vision, 401(k), group life insurance, educational reimbursement, among other benefits.
We value our employees and strive to offer many opportunities for professional growth.
ATG is an Equal Opportunity/Affirmative Action Employer Minorities/Females/Vets/Disability ATG is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Learn more about your rights under Federal EEO laws and supplemental language.
Job tags
Salary
