ISSE/ISSO

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret SCI + Polygraph

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber Security

Job Qualifications:

Skills:

Cloud Security, Greenlight Oracle Access Violation Management, Mitigation, Xacta (Platform)

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

A career as an ISSE at GDIT means owning every opportunity to help support and advance our clients’ missions. At GDIT, cyber security is embedded into every aspect of what we do and we’re constantly evolving our cyber solutions to overcome our clients’ biggest challenges.

At GDIT, people are our differentiator. As an ISSE, you will help ensure today is safe and tomorrow is smarter. We are seeking an experienced ISSE capable of working within Xacta, Greenlight, Rapid7 and assigned onsite Information System Security Managers to maintain and renew system security accreditations. Successful candidate must be able to prioritize multiple projects and move applications seamlessly through the accreditation process.

REQUIRED SKILLS:

• Experience with developing and reviewing security concept of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans.
• Documented experience with Xacta, GreenLight, and Risk Management Framework (RMF) processes (Rev4 and Rev5)
• Demonstrated on-the-job knowledge and experience cloud security design, requirements analysis, control implementation, and mitigation. Demonstrated experience securing applications in a cloud environment such as Amazon Web Service
• Demonstrated on-the-job knowledge and experience with Assessment and Authorization (A&A) policy and guidance to include ICD-503, FISMA and RMF/A&A processes, NIST SP (including but not limited to 800-27, 800-30, 800-37, 800-53, 800-60, 800-137, 800-144, and 800-145), FIPS (199, 200), CNSSI 1253 technical controls, and developing and maintaining associated certification and accreditation assessment and authorization documentation for systems
• Demonstrated on-the-job knowledge and experience with performing security system scans for network, platform, database, and web services using different security tools (e.g. Nessus Rapid7, Weblnspect, AppDetective)
• Outstanding interpersonal skills and team player
• Outstanding written and verbal communication skills; ability to present reports to management; motivated security expert anxious eager to thoroughly investigate, analyze, and document system issues and resolutions. Includes the ability to work with developers and engineers to determine appropriate mitigations to vulnerabilities
• Demonstrated outstanding ability to produce quality deliverables and to complete assigned projects on time, provide consistent status updates to ensure IT security projects stay focused.
• Demonstrated outstanding attention to detail - completes tasks per standard operating procedures; reports discovered anomalies and inconsistencies
• Demonstrated outstanding persistent and creative problem solver - strong troubleshooting skills and determined to find solutions to technical problems; identifies root cause and presents possible solutions to management
• Demonstrated outstanding work ethic and a proven professional - respectful, dependable, takes initiative

DESIRED SKILLS:

• Certifications CISSP, CASP
• Experience with cloud security design, requirements analysis, control implementation, and mitigation.
• Experience with JIRA and managing security based requirements
• Project or program management experience.

WHAT YOU’LL NEED TO SUCCEED:

<