Information Security Systems Officer

Position Summary

As a company, MAG is dedicated to providing real-time situational awareness to help our customers make the world safer. At MAG, we believe that our success is due to the exceptional employees we recruit, hire, and retain. If you are interested in joining a team that is laser-focused on serving our customers with technical expertise, operational excellence, and flawless execution, then we encourage you to apply today! 

 

MAG is looking for a Information System Security Officer (ISSO), to be part of an important DoD program that has a direct impact on our nation's warfighter. Your expertise in your field will be utilized and respected.  Due to the classified nature of this work, this position is not eligible for remote or telework. This position will be based in Lexington Park, MD.  

 

****Must Be a US Citizen with a Secret Clearance***

Essential Duties and Responsibilities

Duties include, but not limited to:

• Duties include, but not limited to:

  • Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies based on the JSIG to support MAG locally with oversight via the government customer.

  • Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), and the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks.

  • Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.

  • Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.

  • Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).

  • Preparing certification letters and Memoranda’s of Agreements (MoA) and Memoranda’s of Understanding (MoU) with system owners for interface and networking implementations.

Requirements

Minimum Requirements

 

• DoD 8570 Certification IAM-I (CGRC, CDN, Security+ CE)

 

Qualified candidates should also have a high level of experience and proficiency in the following areas:

• Security controls and implementation delineated in the Committee of National Security Systems Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG)
• Performing vulnerability assessments using Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.
• Performing security control continuous monitoring, security audits, risk analysis, and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations.
• Familiarity with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4, and JSIG.
• 5 years of hands on Information Assurance/Cybersecurity (IA/CS) within an ISSO, ISSM or equivalent position.

 

Education

• Bachelor’s degree in computer science, Information Systems Management, or related technical degree from an ABET-accredited institution.
• In lieu of a bachelor's degree, qualified candidates should have at least 5 years of IA/CS experience.

 

Desired Requirements

• 5 years of experience with Risk Management Framework (RMF) DODI 8510.01 is desired.

 

Other Qualifications

• U.S. citizenship
• Active DoD Secret clearance with Special Access Program (SAP) experience.
• Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information (SAP).

 

Special Note

The position is contingent upon c