Information Systems Security Officer (ISSO)

About the role

The ISSO will work directly with the Navy Qualified Validator and site Information Systems Security Manager (ISSM) to analyze complex and unique technical support assignments and collaborate with other cyber security engineers, system administrators, and program analysts within a scaled agile environment.

Responsibilities

• Support all RMF packages for the NSWC Corona - Corona Division.
• Support site Information Systems Security Manager (ISSM) in compliance reviews of systems.
• Contribute to the development of cybersecurity policies and procedures.
• Responsible for reviewing and assessing cybersecurity risks.
• Responsible for the management of Risk Management Framework (RMF) best practices to attain/ maintain continuous Authority-to-Operate (ATO) capability.
• Ensure the cybersecurity posture of assigned systems.
• Research National Institute of Standards and Technology (NIST), DoD and Navy Guidance on Cybersecurity and related topics in response to requests for data or information related to cybersecurity topics, posture, impacts, or issues and reviews.
• Review architectures and designs for cybersecurity compliance and provide recommendations.
• Ability to perform and troubleshoot security measures including analysis, periodic testing, evaluation, verification, accreditation, and review of information system installations at appropriate classification levels.
• Review results in a cybersecurity impact assessment report when required.
• Compile, review, and manage system POA&Ms.

Requirements

• Bachelor of Science degree in Information Systems, Engineering, Computer Science, or Business or similar field (MS preferred)
• Minimum of seven (7+) years of experience to include the following:
• Nessus/ACAS Scanner Experience
• ACAS dashboard, setup, ability to run scans, ability to troubleshoot scanner and scanner results
• NIST/STIG Experience
• Experience with STIG Viewer/validation/analyzing and compiling results into a POA&M
• RMF Experience
• Experience with eMASS, Artifacts, Test Plans, Control Assessments, and compiling tools to process and collate test results
• Security + (IAT Level II Certified)

Qualifications

Must currently hold a security clearance at the minimum Secret level.

Skills

• Knowledge of cybersecurity policies and procedures
• Experience with RMF and STIG processes
• Ability to troubleshoot and analyze security measures
• Strong research and writing skills

Benefits

Flexible working hours, professional development opportunities, competitive salary, and benefits package.

Pay

Competitive salary based on experience and qualifications.

Schedule

Full-time, 40 hours per week, 100% onsite.