Information System Security Officer; ISSO

Job Title:

Information System Security Officer (ISSO)

Job Category:
Information Technology

Time Type:
Full time

Minimum Clearance Required to Start:
Secret

Employee Type:
Regular

Percentage of

Travel Required:

Up to 10%

Type of Travel:
Local

CACI’s Agile Solution Factory (ASF) is hiring an Information System Security Officer (ISSO) to support the assessment and security, security configuration, and accreditation/approval to operate (ATO) of a Ribbon-based telecommunication system. Join this passionate team of industry-leading individuals supporting the Best Practices in Agile Software Development for the Department of Defense. ASF programs thrive in a culture of innovation and are constantly seeking individuals who can bring creative ideas to solve complex problems, both technical and procedural at the team and portfolio levels.

The ability to be adaptable and to work constructively with a technically diverse and geographically separated team is crucial.

• The ISSO is responsible for the Information Assurance and Security system and network services. Responsible for activities associated with delivery of Cybersecurity policy implementation and network solutions associated with customer-defined systems and software projects; responsibilities include:
• Meet the government’s cybersecurity accreditation process to achieve an Authority to Operate (ATO).
• Maintain the Security Authorization or Authorization to Operate (ATO) of assigned systems and conduct initial and annual risk assessments.
• Identify required STIGs and guide system certification based on project requirements.
• Prepare a certification package, including STIG assessment and documentation, vulnerability and scan assessments, and conduct quarterly software security reviews.
• Ensure all security measures comply with applicable government policies.
• Draft and/or prepare and maintain security Assessment and Authorization documentation (e.g., IA SOP, SSP, SCTM).
• Develop, monitor and resolve Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned facilities and Information Systems.
• Participate in internal and external security audits and inspections and perform risk assessments.

• Must be a U.S. Citizen, with an active Government security clearance.
• College degree (B.S., M.S.) in Information Assurance, Computer Science, Information Management Systems or a related discipline or equivalent years of experience.
• Certifications:
  
  Must have Security+ Certification or equivalent DOD 8570 IAT Level 2 certification. CISSP certified a plus.
• Demonstrated knowledge of National/DoD/Army Directive security policies.
• Demonstrated knowledge of directive, guidelines, processes, and procedures for maintaining the security, integrity, and confidentiality of secure facilities, containers, and communications.
• Demonstrated experience using Army or equivalent eMASS.
• Demonstrated experience with Assured Compliance Assessment Solution (ACAS)/Tenable Nessus Vulnerability Scanner.
• Demonstrated experience with DISA Security Content Automation Protocol (SCAP), Evaluate STIG (eSTIG), and STIG Viewer v3 required.
• Demonstrated knowledge of DOD RMF accreditation implementation.
• Ability to identify and manage risk.
• Working knowledge of and ability to assist others in the use of information security provisioning and monitoring tools to support process improvement.
• Excellent written and verbal communication skills.
• Strong collaboration skills and desire to work within a team.
• Understanding of all elements of the DOD Cybersecurity policies and requirement.
• Highly responsible, team-oriented individual with very strong communication skills and work ethic; self-starter.
• Professional
  
  Experience:
  
  10+ years related technical experience.

• Experience with Unified Communications (UC) technology, telecommunications/Voice over IP (VoIP).
• Demonstrated experience with Linux v8+, Windows Server 2019 and above, and VMWare Cloud Foundation (VCF).
• Demonstrated familiarity and experience with Firewalls, Intrusion Prevention Systems, Web Gateways, and/or enterprise Antivirus software technologies.

A culture of integrity. At CACI, we place…