ISSO - Cyber Security

ISSO - Cyber Security

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 25%

Type of Travel: Continental US

* * *

CACI is seeking an Information Systems Security Officier (ISSO) - Cyber Security for its location in Cheyenne, WY.
The Opportunity:
If you are looking for your next career challenge supporting a unique mission we would like to speak with you. In this role, you will be the Cyber Security subject matter expert supporting both in house and external customer efforts.  As a valued member of the team, you will work with multiple entities ensure that various cyber security requirements are implemented appropriately.  This position requires travel within the Continental US


Responsibilities:

• Provide inputs to ensure systems are operated, maintained, and disposed of by security policies and procedures as outlined in the security plan.
• Coordinate Assess and Authorize (A&A), Configuration Management (CM), and Release Management requirements for the client's systems by DoD Instructions
• Ensure application, system, environment, or organizational changes do not hurt the security posture of the system security compliance and assessment
• Monitor and validate vulnerability postures in Assured Compliance Assessment Solution (ACAS), and ensure all systems comply with DISA Security Technical Implementation Guidelines (STIG)s and with CSSP HBSS requirements
• Verify the implementation of delegated aspects of the system security program locally as well as across customer-related systems.
• Preparation and submission of Authority to Operate documentation to eMASS and XACTA
• Ensure audit records are collected and analyzed per the security plan.
• Report all security-related incidents to the Facility Security Officer and assist with formal reporting to impacted customers and DCSA oversight.
• Formally notifying the customer(s) of any changes to a system that could affect authorization to operate.
• Ensure user activity monitoring data is analyzed, stored, and protected following the DCSA policies and procedures.
• Assist ISSM in the execution of the continuous monitoring strategy.
• Development and oversight of cyber security awareness training program.
• Travel to other locations or customer sites as necessary.
• Perform other duties as assigned.
• Identify system security requirements following DCSA and NISPOM policy.
• Configure cyber security tools to ensure auditing and vulnerability management controls are met.

Qualifications:

Required: 

• An Active DOD Secret Clearance with the ability to obtain a TS/SCI
• A B.S Degree in Information Technology/Systems, Computer Science, Computer Engineering, or Electrical Engineering with 3-5 years related experience, 6-8 years related experience without a Bachelors Degree
• Must hold at least one active Department of Defense 8570.01-M IAT/IAM Level II certification.
• Experience in initial risk assessment activities and ability to assist Authorizing Official risk determination with risk acceptance
• Advanced knowledge of information technology and networking, including a working knowledge in one of the following: IP Networking, cyber security, or software development
• Advanced knowledge and understanding of Windows Server, Active Directory, DHCP, DNS and WSUS/SCCP
• Advanced knowledge of Microsoft Windows and Linux software applications and other applications as required
• Experience as an ISSO/ISSM managing systems approved to process classified information including working knowledge of the National Industrial Security Program Operating Manual (NISPOM), Intelligence Community Directives (ICD 503, etc.), Joint SAP Implementation Guide (JSIG), and Risk Management Framework (RMF) as prescribed in NIST SP 800-53, SP 800-53A, and SP 800-137.
• Knowledge of Air Force cyber security policies.
• Experience submitting ATO documentation in eMASS and Xacta.

Desired:

• An understanding of the relationship between system controls and how they affect system security
• A minimum of 5 years monitoring system NIST compliance using available workflow tools
• A minimum of 3 years using eMASS as a system certification and accreditation tracking tool
• A minimum of 3 years of practical experience transitioning to and operating within RMF in DoD applications

-

______________________________________________________________________________