Information System Security Officer; ISSO

Summary

Information System Security Officer (ISSO) – Arlington, VA – Chenega Military, Intelligence & Operations Support (MIOS)

Chenega MIOS delivers essential technology services to support national security missions.

• Provide oversight for assigned network(s) by working with the operations staff to ensure compliance with STIGs and IAVM.
• This role requires being on-site five days a week during the initial training period of approximately two months. Telework is then allowed one day per week.
• Ensure that stakeholders adhere to Federal Information Assurance policies and procedures to acquire and maintain an Information System's Authority to Operate (ATO) under the Federal Information Security Management Act (FISMA) of 2002.
• Lead RMF A&A efforts, including activities within the A&A cycle and outside of the ISSO functions, work directly with ISSM, ISO, and AO, work with engineering and operations support staff to secure systems and ensure compliance, and provide oversight for existing and new POAMs.
• Provide POAM support by advising CISO/AO of changes and assisting in the coordination of efforts to remediate deficiencies and vulnerabilities.
• Responsible for performing Con Mon reviews for daily, weekly, monthly, and quarterly checks (primarily completed through Splunk, with a small number of manual/administrative checks).
• Assist with IR activities by verifying sanitation procedures are followed prior to submitting the CART case to the CISO for closure.
• Work with the Security Tools Team to identify critical/high vulnerabilities for remediation and report network security posture at the weekly CISO/AO meeting.
• Other duties as assigned.

• Bachelor's degree OR
• Associate’s degree with 2+ years relevant experience OR
• High school diploma or GED equivalent with 4+ years relevant experience.
• 5+ years’ relevant experience.
• IAT Level II certification.
• DoD Top Secret clearance required with eligibility to obtain SCI.

• Ability to coach, counsel, and mentor.
• Excellent communication.
• Experience with Agile methodology.
• Knowledge of cyber security risk management processes.
• Ability to multitask in a fast-paced environment.
• Strong use and understanding of systems engineering concepts, principles, and theories.
• Strong knowledge of cybersecurity technology and trends.
• Experience presenting technical concepts to a variety of audiences.
• Ability to assist the customer and staff with technical issues related to security products.