Information System Security Officer (ISSO)

LinQuest is seeking an Information Systems Security Officer (ISSO) to join our team supporting the Space Systems Command (SSC) at the Tools Applications and Processing (TAP) Lab in Boulder CO. Candidates selected will focus on Information Assurance and Risk Management Framework to support the Sensor Exploitation Ground Architecture (SEGA) ground segment network architecture operations.

Key Responsibilities:

• Recommending resource allocations required to securely operate and maintain the network enterprise (NE) IA requirements.
• Participating in information system risk assessment during the A&A process
• Developing security requirements for hardware, software, and service acquisitions specific to NE IA SEGA/TAP networks
• Ensuring NE IS recovery processes are monitored and that IA features and procedures are properly restored.
• Identifying alternative functional IA security strategies to address SEGA/TAP NE security concerns and develop plans capable of implementation.
• Ensuring all IA inspections, tests, and reviews are coordinated for the NE
• Evaluating the adequacy of security measures proposed or provided in response to requirements listed in acquisition and operations documents
• Developing and implement programs to ensure systems, network, and data users are aware of, understand, and follow NE and IA policies
• Evaluating IT enclave systems and assess risk posture and system security findings and recommend mitigation and /or remediation actions.

Required Skills and Experience: 

• Bachelor’s Degree in Computer Science or related discipline or 10+ years’ experience in the IT/Cyber industry
• A minimum of 2-5 years of experience as an ISSO
• Experience using RMF and ITIPS
• Incident management and response experience
• Experience analyzing vulnerabilities, assessing risk and ultimately making a risk recommendation to the AO. This includes in-depth knowledge and experience with requirements risk management, security engineering, and security architecture
• Experience in utilizing enterprise computer forensic tools (e.g., ArcSight, Palantir)
• Experience with computer networking concepts and protocols, and network security methodologies
• Experience with risk management processes (e.g., methods for assessing and mitigating risk)
• Experience with and knowledge of Information Assurance (IA), computer network attack (CNA), computer network defense (CND), and computer network exploitation (CNE) concepts, practices, and tools for the administration of classified and unclassified DoD computer networks and systems
• Experience with and knowledge of DoD and US Government (USG) information system (IS) accreditation and certification policies, standards, and governance, to include, and NIST FIPS Publications, DoDI 8500.2, and DISA STIGs
• Security+ certification
• CISSP certification
• TS/SCI Security Clearance is required to be considered for this position
• Ability to determine how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Ability to determine how a security system should work and how changes in conditions, operations, or the environment will affect these outcomes
• Ability to identify measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system
• Ability to prioritize and deconflict targets for CND and CNA activities
• Ability to conduct collateral effects and blowback assessments
• Ability to integrate information security requirements into the acquisition process; using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and establishing multiple sources (e.g., delivery routes, for critical system elements)
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations
• Ability to conduct, review, and assess the results of security audits and A&A packages
• Ability to create technical correspondence, standard operating procedures (SOPs), and other repeatable processes
• Ability to analyze, collate, organize, report on, respond to, and develop solutions to threats, risks, and exposures of DoD networks
• Ability to advise IA teams in the DoD to support execution of technical countermeasure, to include but not limited to IAVA, IAVB, CTO, Warning Orders, and Situational Awareness Reports (SARs)
• Ability to recommend and establish DoD strategic priorities and apply available assets to investigate/isol