Information Systems Security Officer (ISSO) (Engineer Info Assurance 3) - 30059

About the role

HII's Mission Technologies division is seeking an Information Systems Security Officer (ISSO) to support the 14th Weapons Squadron, located at Hurlburt Field, Florida.

Responsibilities

• Draft, review, and update Risk Management Framework (RMF) artifacts required for achieving an Authority to Operate (ATO) for emerging systems.
• Develop and maintain the System Control Traceability Matrix (SCTM) and System Security Plan (SSP), manage system changes, support Assessment & Authorization (A&A) documentation, and assess the security impact of modifications.
• Write System Security Plans (SSP), Plan of Actions & Milestones (POA&M), Continuous Monitoring Plan, Risk Assessments, Privacy Impact Analyses (PIA), and supporting documentation for systems subject to NIST SP 800-53.
• Lead Security Assessment and Authorization processes and procedures.
• Report all cybersecurity incidents to the program Information Systems Security Managers (ISSM) through reports and briefings.
• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system, program, or enclave.
• Manage accounts - creation, management, audit and disposal for permanent party, students and guest help.
• Ensure all users have requisite security clearances and accesses, authorization, need-to-know, and are made aware of applicable security responsibilities before access is granted.
• Ensure information systems are operated, maintained, and disposed of in accordance with policies.
• Ensure all SCIF and SAPF information systems security-related documentation is current and accessible to properly authorized individuals.
• Formally notify responsible parties when changes occur which may affect information system or space accreditation/certification.
• Maintain an equipment inventory of all systems in SCIF/SAPF.
• Coordinate any changes or modifications to hardware, software, or firmware of information systems with appropriate approving authority prior to changes.
• Initiate protective and corrective measures when a security incident is discovered.
• Operate and maintain all internal network infrastructure devices up to the TACLANE.
• Conduct inspections as per policies.

Qualifications

• 5 years relevant experience with Bachelors in related field; 3 years relevant experience with Masters in related field; 0 years experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 9 years relevant experience.
• Must have an active TS/SCI DoW clearance; ability to be read into multiple Special Access Programs.
• Strong understanding and experience with the Risk Management Framework, Joint SAP Implementation Guide (JSIG), and RMF Bodies of Evidence.
• Excellent oral and written communication skills, collaboration skills, and experience in presenting cybersecurity issues to all levels of management, as well as non-technical staff.
• Strong work ethic, demonstrated self-starter with the ability to work in a fast paced, team-oriented environment.

Preferred qualifications

• Bachelor's Degree in either Computer Science, Information Systems Management, Information Technology, and five (5) years of relevant experience, as described below. In absence of a degree, nine (9) relevant experience as described below.
• Five (5) years of experience with any combination of the following: cybersecurity, network security architecture, system hardening, auditing/compliance methods, Information Technology, and/or systems security engineering concepts such as topology, protocols, components, and/or principles (e.g., application of defense-in-depth).
• Experience supporting cybersecurity compliance as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications.

Pay

Anticipated Salary Range: $86,519.00 - $110,000.00

Schedule

Full Time/Salaried/Exempt, Travel: 0 - 10%

Benefits

Competitive benefits including best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools; life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; and early childhood and post-secondary education scholarships. Bonus/other non-recurrent compensation may be offered for qualified positions.