Information System Security Officer (ISSO)

Information System Security Officer (ISSO)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

We’re looking for an Intermediate Level multi functional - Information System Security Officer (ISSO) with knowledge of and experience in executing selected Information System Security Engineer (ISSE) tasks to join our Naval Tactical Command Support System (NTCSS) team at Norfolk. We are seeking a multi functional cyber security professional who is experienced in performing the assigned duties of an ISSO and has knowledge of and experience in performing selected ISSE related tasks. The principal role of this multi-functional cyber security professional is the management of the current enterprise in-service product line and next generation cloud-based solutions that are scheduled for Certification & Accreditation (C&A). You will have a lead role in preparing Certification & Accreditation (C&A) packages. The scope includes the execution of DoN Risk Management Framework (RMF) processes including the completion of RMF process steps in eMASS, the development of RMF artifacts (Implementation Plan, Security Plan, System Level Continuous Monitoring Plan, etc.), and the implementation of Security Controls in coordination with development project teams.

On-site Work Requirements
This position requires a mix of on-site and remote work. The successful candidate should be available to work on-site at Naval Station Norfolk Va. for a minimum of two days per week, with the possibility of additional on-site days as needed for critical projects or maintenance activities. It is anticipated that this requirement will further increase to towards a five-day 40 hour on-site a week schedule.

Responsibilities:

• Perform duties related to Cybersecurity Testing, Evaluation, Validation and Verification of traditional and non-traditional(cloud based) information systems.
• Define and Implement technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
• Configure and validate secure systems, tests security products/systems to detect computer and information security weakness. Generates security architecture documentation.
• Design and implement plans of action and milestones to remediate findings from vulnerability and risk assessments. Provides information assurance for digital information, ensuring its confidentiality, integrity, and availability.
• Participate with the client in the strategic design process to translate security and business requirements into technical designs.
• Provide critical written and verbal analyses of previously generated security architecture documentation and vulnerability and risk assessments.

Qualifications:
Required: 

• Must be a US Citizen and possess an active SECRET clearance.
• Must be eligible to pass a T5 background investigation.
• Must possess current DoD 8570 IAT Level 2 certification or higher (ex. CompTIA Security+, CASP, CISSP).
• Have a Bachelor’s degree and 7 years of relevant experience.
• Must have a demonstrated ability to work either independently or with very little guidance.
• Demonstrated working knowledge of DoD Information Assurance and Cybersecurity policies, procedures, and practices including the Risk Management Framework (RMF) and NIST SP 800-53.
• Demonstrated working knowledge of Cybersecurity, Information Technology, Network Architecture, and/or related concepts.
• Demonstrated working knowledge of administrating servers, workstations and/or other Information Technology.
• Demonstrated working knowledge of system and application security threats and vulnerabilities.
• Demonstrated Skill in using DoD tools and capabilities for vulnerability assessments (eMASS, ACAS, STIGs, SRGs, SCAP,XCCDF, etc.).
• Demonstrated skill in implementing mitigation strategies and how to resolve problems, and to re-test/ re-evaluate systems.

-

______________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An enviro