Information Systems Security Officer; ISSO

Mission Context

LV8D Solutions supports national security space and intelligence customers delivering next-generation sensing and exploitation capabilities. The role of Information System Security Officer (ISSO) provides advice and assistance to the Government regarding secure configuration and operation of IT assets.

LV8D Solutions is seeking an ISSO to provide oversight, guidance, and technical expertise on IT and information system security matters that support the customer's mission by implementing and maintaining information security policies, practices, and technologies. Collaborate with internal and external stakeholders while demonstrating a strong understanding of Contractor Program Security functions, responsibilities, and disciplines essential to developing and sustaining an effective security program.

Interested candidates need to thrive in an innovative, fast-paced environment; are highly motivated and not afraid to take on uncharted territory; possess strong communication, leadership, and organizational skills; and be able to prioritize their time to be effective in a dynamic environment.

• Maintain an efficient operational security posture for programs and information systems
• Information Security interface to government customer and Accrediting Authorities
• Perform vulnerability/risk assessments to support authorization and accreditation
• Prepare and review Risk Management Framework (RMF) documentation to include System Security Plans (SSPs), Authorization to Operate (ATO) packages, Risk Assessment Reports (RMR), Security Control Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&M), System Assessment Plans, and Continuous Monitoring Plans
• Support and track customer security authorization activities
• Conduct periodic reviews and evaluations of required IS policies, standards, and procedures
• Coordinate Information System Security Assessments, tests, and reviews
• Conduct due diligence and process hardware and software requests
• Provide configuration management for information system security software, hardware, and firmware
  
  Ensure proper measures are taken when an IS incident or vulnerability is discovered

• Familiarity with conducting research and analysis
• Thorough understanding and application of network security principles, practice, and implementations
• Familiarity with controlling, labeling, virus scanning, and appropriately transferring data (uploading/downloading) between information systems at varying classification levels
• Excellent communication, interpersonal, and collaboration skills to build rapport with the military personnel, civilians, and other contractors at all levels
• Thorough working knowledge of all applicable, IC, DoD policies, procedures and operating instructions related to Information Technology, Information Assurance, Information Management (IT/IA/IM)
• Working knowledge of cross-functional integration of information systems into a physical security environment
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Understanding of system methodologies including but not limited to client server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, LAN, switches, and routers
• Expert in detecting and preventing computer security compromises in a networked environment
• Expertise with configuration management, system maintenance, and integration testing
• Expert in the use of tools used to prevent and/or negate malicious code
• Understanding of Commercial Off-The-Shelf (COTS) tools that scan at the physical layer of all removable and fixed media types including but not limited to: CDs, hard drives, thumb drives, Zip/Jazz, etc.
• Expertise in forensics chain of custody and evidentiary preservation
• Ability to troubleshoot technical configurations and make recommendations on the protection of classified and sensitive data
• Demonstrated ability to translate technical information and information technology jargon into plain English
• Ability to apply a risk management philosophy when faced with security challenges and the ability to articulate the pros and cons in a clear concise manner
• Demonstrated proficiency with the following computer operating systems (e.g., Microsoft Windows, LINUX, UNIX, Mac OS, etc.)
• Analytical ability to decipher complex technical configuration management documents
• Proficient in maintaining databases
• Strong ability to elicit, articulate, and document information in a well-organized manner
• Demonstrated experience with Microsoft Office Suite
• Demonstrated ability to correlate audit results between various systems and/or users and notify the Information Systems Security Manager (ISSM) of any discrepancies
• Demonstrated proficiency in successfully guiding complex information systems through assessment and authorization control gates
• Expert ability to establish and maintain effective internal and external working relationships with…