ISSO Specialist

Clearance Level: A Top Secret clearance with SCI eligibility is required. Candidate may be required to pass a CI polygraph. Must be a US Citizen.

Location: Must be within 100 miles from Lexington, MA.

About the Role

At Aquila Technology, you will see our team’s passion every day, whether we are building a robust, policy-compliant IT system or stress-testing a system to identify gaps and security vulnerabilities. To own the advantage, we ensure our team owns results and gets the work done right the first time by deploying smart, purposeful solutions that work. Aquila is the right people with the right skills driving the right outcomes. We call this the Aquila Advantage.

Aquila Technology is seeking a highly skilled ISSO Specialist to join our team in supporting one of the country’s premier defense research organizations. The team seeks someone to support the design, development, implementation, and testing of software for a series of large-scale communications system demonstrations. This role supports the Air Force Programs and prefers candidates with mid-level experience.

Responsibilities

• Assist and support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
• Continuously validate the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
• Ensure that action plans, milestones, or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization’s vision and goals.
• Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
• Recommend resource allocations required to securely operate and maintain an organization’s cybersecurity requirements.
• Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to key stakeholders.
• Recognize a possible security violation and take appropriate action to report the incident, as required.
• Assist the Program Managers and the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy.
• Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures.
• Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
• Lead and align information technology (IT) security priorities with the security strategy.
• Prepare for and participate in periodic organization compliance assessments.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise’s cybersecurity program.

Requirements

• 4 years of experience in System Auditing.
• Current DoD 8570 IAT Level II Certification (GSEC, Security+ CE, SSCP, CCNA-Security).
• 4 years of experience in Regulatory & Compliance.
• 4 years of experience with Government Policy/Regulations.
• 4 years of experience with STIGs/SCAP.
• 4 years of experience in Assessing Security Controls (CS105.16).
• 4 years of experience in Assessment and Authorization.
• 4 years of experience in Authorizing Systems (CS106.16).
• 4 years of experience in Categorization of the System (CS102.16).
• 4 years of experience in Continuous Monitoring (CS200.16).
• 4 years of experience in Implementation of Controls (CS104.16).
• 4 years of experience in Monitoring Security Controls (CS107.16).
• 4 years of experience with NIST 800-53.
• 4 years of experience with NIST SP 800-37.
• 4 years of experience with Risk Management Framework (RMF).
• 4 years of experience in Selecting Security Controls (CS103.16).

Nice to Have

• Bachelor’s Degree.
• Experience with HBSS.
• Experience with NIST 800-171.

Benefits

• PTO – 15 days (vacation/sick).
• 10 paid holidays – 6 standard (New Year’s, Memorial Day, Independence Day, Labor Day, Thanksgiving, and Christmas) – 4 floating holidays.
• 1.5 paid days, or 12 hours, for approved volunteer work.
• 1 week of paid maternity/paternity LOA after 1 year of full-time employment.
• Tuition & Training Reimbursement – Up to $5,000 annually for pre-approved, job-related courses taken through an accredited college or university. Team members must achieve a grade of “B” or better to qualify for reimbursement.
• 401K with Fidelity – Eligible to participate following 90 days of employment. Company match on employee contribution: $1/$1 up to 3%, then $0.50/$1 for 4th and 5th %. Fully vested from day one.
• Cell Phone & Internet Reimbursement – Up to $150 monthly to cover cell phone, data, and home internet expenses (for team members who work from home 2 days a week or more).
• Buy Your Own Device (BYOD) – Reimbursement of up to $1,500 every three years for the purchase of electronic equipment used to access corporate services.

Schedule

This position is 100% onsite due to the nature of the work. The role will be onsite working primarily in a closed space. There is some flexibility on the work schedule (9/80 or 4/10 type schedules).