Information System Security Officer; ISSO

Responsibilities

Noblis is hiring an ISSO in Huntsville, AL to supporting the Threat Management Office (TSMO). The mission of the Threat Systems Management Office (TSMO) is to manage the Army Threat System Programs to include the total life cycle of threat systems for testing and training in the live, virtual, and constructive environments. TSMO designs, builds and tests representations of operational and emerging hostile systems with virtually identical performance capabilities that match the identified threat.

TSMO ensures all threat systems are continually developed, upgraded, and/or modified and tested to reflect the current threat weapons systems platforms with state-of-the-art technology to support new and emerging DOD weapon systems. Additionally, TSMO conducts threat assessment and analysis in conjunction with the Army, Navy and other joint services operations. TSMO utilizes a combination of simulators and simulation models, foreign material acquisition, commercial-off-the-shelf (COTs), and new development efforts to achieve its goal of providing threat relevant Electronic Warfare (EW), Information Operations (IO), integrated air defense (IADs), and command and control (C2) capabilities to support Operational Test and Evaluation (OT&E) events.

These OT&Es include Network Integration Evaluations (NIEs), Combatant Commander events, as well as other testing and training events. TSMO requires a range of activities associated with conceptualizing, developing, and supporting the execution of testing events. Support is required to allow for more realistic threat representation testing for both hardware and/or software, and to upgrade threat systems and sub-systems with modern techniques that will offer superior threat representation testing against foreign threats.

The TSMO requires the design of threat representations in order to reproduce live, virtual, and constructive threat simulations that satisfy the U.S. Army Test and Evaluation Command (ATEC) to support future test and training events.

In this role, the Information Systems Security Officer (ISSO) leads the Risk Management Framework process for systems assigned, and will support the full lifecycle of the Department of Defense (DoD) RMF process, from system categorization and control implementation through assessment, authorization, and continuous monitoring. The ISSO must possess a strong knowledge of the process for developing Risk Management Framework (RMF) packages from beginning to award of Authority to Operate (ATO) and must also have a thorough understanding of the Enterprise Mission Assurance Support Service (eMASS) system to include inputting data, maintaining records, and navigating the system.

The ISSO will support the identification of system vulnerabilities and determine appropriate security controls to mitigate or eliminate risk from the uncovered vulnerabilities. The ISSO will be responsible for preparing artifacts and documents to support government Authorization to Operate (ATO) activities. Additionally, the ISSO will conduct and/or support vulnerability and security compliance assessments using applicable tools, including ACAS/Nessus, SCAP Compliance Checker (SCC), STIG Viewer, and Evaluate-STIG.

The Contractor shall analyze assessment results, document security deficiencies, support remediation activities, and maintain evidence necessary to demonstrate compliance with applicable NIST, DoD, DISA, and Army cybersecurity requirements.

• Serves as an Information Systems Security Officer and will develop and advise on RMF packages, strategies, and technical components to ensure compliance with NIST 800-53 security controls. Assist in the implementation of the required…