Information Systems Security Officer (ISSO)
TS/SCI Required
Lackland AFB San Antonio, TX 78236
Support the Information System Security Team and act as the primary Cybersecurity technical advisor to the Program Manager, Lead Engineer and/or Lead ISSM/ISSO. Will act on behalf of the Program Manager or the Information Systems Security Manager to maintain the authorization of the system throughout its lifecycle, and act as the Information Assurance Officer for the Weapon System. Experience administering or running ACAS and reviewing Nessus reports. Ability to review system audit logs of various operating systems for activities that align with NIST SP 800-53 AU control family requirements. This is an opportunity to join an agile and growing company that makes a direct impact in the cyber fight against cyber criminals.
Execute the Risk Management Framework (RMF) to support A&A of assigned systems.
Evaluate the technical implementation of the security design to ascertain that security software, hardware, and firmware features affecting confidentiality, integrity, availability, accountability, and non-repudiation have been implemented.
Analyze existing and future systems, reviewing security architectures against existing and future architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection throughout the system's lifecycle.
Provide security risk assessment methodology to system development, including assessing and auditing network infrastructure, antivirus deployment, risk analysis, executing security log analysis and reporting.
Validate system security requirements, analysis compliance, and review/submit System Security Plans for enterprise-wide architectures.
Conduct DoD Information Assurance Certification and Accreditation Process (DIACAP) C&A planning and testing and transition to Risk Management Framework (RMF) planning and testing.
Conduct cybersecurity technical policy guidance and consultation
Review required Program Office artifacts and make recommendations to support the cybersecurity RMF risk analysis and recommendation to the assessors.
Develop A&A documentation for each required system.
Maintain each accreditation or authorization and assist in achieving ATC/ATO for additional weapon system instances.
Review IA documentation to ensure they satisfy Security Engineering and Certification requirements
Requirements
Must have an active DoD Top Secret/SCI clearance, or be SCI eligible upon query in JPAS
Must have an IAT Level II certification
Knowledge of DoDI 8500.01, Cybersecurity, DODI 8510.01 Risk Management Framework, appropriate NIST Special Publications and Security Controls and the DoD A&A/C&A processes
Must have working knowledge of Enterprise Information Technology Data Repository (EITDR), eMASS and XACTA.
Must be able to assist with the preparation and review of Federal Information Security Management Act (FISMA) documentation