Information Systems Security Officer (ISSO)

Overview

Arcfield is a leading provider of full lifecycle, mission-focused systems engineering and integration capabilities to the U.S. government and its allies. The company has more than 60 years of proven experience providing advanced engineering and analysis, IT and C5ISR capabilities to support our nation’s most critical national security missions. Headquartered in Chantilly, VA and with 16 offices around the world, Arcfield employs approximately 1,200 engineers, analysts, IT specialists, and other professionals who put our customers’ missions first, helping them solve their most complex challenges through innovations in modeling, simulation and analysis, digital transformation and C5ISR. Visit arcfield.com for more details.

Responsibilities

• Career level with a complete understanding and wide application of technical principles, theories and concepts.
• Working under only general direction, provides technical solutions to a wide range of difficult problems.
• Independently determines and develops approach to solutions. Prepare, maintain and implement System Security Plans that accurately depict the customer’s contractual requirements.
• Responsible for the oversight and accountability of day-to-day security operations of all classified information systems.
• Support all disciplines within the security program and ensure business needs are met.
• Works directly with program managers and ISSM on all phases of system life cycle development.
• Assist the ISSM working with US Government Security Control Assessors (SCAs) and Authorizing Officials (AOs) to develop a comprehensive RMF package including System Security Plans (SSPs), Information Continuous Security Monitoring Plans, and a Body of Evidence to support system authorization.
• Conducts ongoing vulnerability testing of the information system to verify security features and operating controls are functional, effective and meet government standards.
• Interact with internal and external customers or government security officials to perform security duties, address routine information security matters with employees regarding issues, report preparation and system security access briefings, etc.
• Develops and implements facility procedures to govern marking, handling, controlling removing, transporting, sanitizing, reusing and destroying media and equipment containing classified equipment.
• Responsible for changes to the classified system components, environment and location, including temporary relocation to another classified area.
• Assists ISSM in reporting and mitigation of information system security incidents. Initiates protective and/or corrective measures designed to prevent future incidents.
• Thorough understanding of Automated Information Systems and specifically chapter 8 of National Industrial Security Program Operating Manual (NISPOM).
• Proficiency with various computer applications and testing tools (Word, Excel, PowerPoint, SCC, STIG, SPLUNK, VEEAM, etc.).
• Strong background in certification and accreditation process of information systems using eMASS and ability to write, review and coordinate system security plans. 

Qualifications

Required Education, Experience, & Skills

• Bachelor's in Computer Science, Information Systems, Engineering or related discipline plus 5 - 7 years of experience, or a Master's in Computer Science, Information Systems, Engineering or related discipline plus 3 to 5 years of experience.
• Must POSSESS and be able to maintain a TS clearance
• Security+ or DOD 8140.03 (8570) certifications or working towards certification.
• Experience with auditing various systems (Windows, Linux, and peripherals) with SPLUNK or other audit reduction tools.
• Ability to install and run the SCAP Compliance Checker (SCC) utilizing the latest Security Technical Implementation Guides (STIGS) and take appropriate correctional actions.
• Understanding of simple networks, operating systems (Microsoft Server, Windows, Linux), and computer functions.

Desired Qualifications & Skills

• High level of personal motivation and initiative to learn and acquire new skills and adapt seamlessly to an ever-changing security environment.
• Self-motivated individual who requires limited supervision and has excellent time management skills.
• Strong organizational and communication skills—particularly in technical reports and presentations.
• Able to interface with other team members, other security disciplines and program personnel.
• Experience in COMSEC implementation and management.
• Microsoft Server 2016/Windows 10, or higher administration experience
• RedHat 8, or higher administration, including workstati