Information Systems Security Officer (ISSO) Intermediate with Poly

Your Impact:

Are you interested in using your skills to help shape the Cyber, Security, & Intel space?  If so, look no further. Amentum is seeking an Information Systems Security Officer (ISSO) Intermediate (Int) to join our team of passionate individuals in Ft Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.

Join a team of security experts who are dedicated to protecting and securing our customers' systems at both the enterprise and program level. Our specialists work closely with others in the RMF process to ensure the highest level of security for every system. As the ISSO Int, you will serve on a team that is responsible for the Authorization and Assessment process under the Risk Management Framework (RMF) for new and existing information systems and will be expected to maintain Authority to Operate compliance for all assigned systems.

The work environment is fast-paced and sometimes involves deadline pressures. The nature of the work requires a high degree of teamwork and cooperation with other members of the staff as well as individuals across the Company and Customers. Our program includes easily available process information and support from others with similar positions across the team.

Responsibilities:

•    Maintain the appropriate operational security posture for assigned systems, programs, and/or enclaves.
•    Provide guidance and technical expertise on all matters that impact or affect the security of the information system.
•    Assist in the development and execution of an enterprise level continuous monitoring program to minimize security risks and ensure compliance with that program on a routine basis.
•    Developing, updating, and submitting the System Security Plan and other required documentation that make up the Security Authorization Package.
•    Conduct configuration management for security-relevant changes to software, hardware, and firmware.
•    Perform and deliver security impact analysis of changes to the system or its environment of operation.
•    Assess the effectiveness of system security controls on an ongoing basis to determine system security status.
•    Maintain and enforce IT security policies and implementation guidelines for customer systems in diverse operational environments.
•    Provides configuration management for security-relevant information system software, hardware, and firmware.
 

Requirements:

•    Ten (10) years of related work experience in the field of security authorization.
•    A Bachelor’s degree in Computer Science, Information Technology Engineering, or a related field may be substituted for four (4) years’ experience.
•    DoD 8570.1 compliant IAM Level I certification, such as the CompTIA Security+ certification.  A higher-level certification, such as GSLC, CAP, CASP, CISM and/or CISSP will also be accepted.
•    US Citizen with an active TS/SCI and a current polygraph
•    A working knowledge of the security authorization processes and procedures as defined in the RMF in NIST SP800-37 and familiarity with the ICD503, CNSSI1253, SP800-53, etc.
•    Knowledge of commercial security tools and their uses.
•    Experience with hardware/software security implementations.
•    Knowledge of different communication protocols, encryption techniques/tools, and PKI and authorization services.
•