Senior ISSO​/ISSE; eMASS and ACAS

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have.

The result is a government workforce that is exponentially more creative and productive. For more information, visit www.

Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

Empower AI is seeking a Senior ISSO / ISSE to combine information systems security officer and security engineering responsibilities for the systems managed by an enterprise IT Customer Support Services program supporting a Department of War agency across NIPRNet, SIPRNet, and JWICS enclaves. The role owns the eMASS RMF packages and continuous monitoring for assigned systems as ISSO, and as ISSE engineers and validates STIG/SRG baselines, designs control implementations, leads ACAS vulnerability remediation engineering, and ensures new solutions (endpoint, ITSM/dashboards, collaboration, communications, automation and AI) are designed to achieve and maintain ATO.

The Senior ISSO/ISSE produces the weekly Vulnerability Scan Analysis Report and monthly STIG Compliance Report, prepares systems for assessments, and serves as the go-to security engineering expert for engineers and the Risk Management Support Lead. This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers.

THIS IS AN ONSITE ROLE IN QUANTICO, VA (RKB) WITH UP TO 10% OF TRAVEL INVOLVED.

JOB DUTIES:

• Own the eMASS RMF packages and continuous monitoring for assigned systems as ISSO: SSP, SAR inputs, POA&M management, control implementation statements, artifact collection, ATO expiration tracking and reaccreditation, and assessment preparation and liaison with assessors.

• Lead ACAS/Nessus vulnerability management engineering: analyze weekly scan results, determine root causes and remediation or mitigation, drive resolver groups to closure within policy time frames, and produce the weekly Vulnerability Scan Analysis Report.

• Engineer and validate STIG/SRG-compliant baselines and security control implementations for endpoint, ITSM/dashboard, collaboration, and communications systems using STIG Viewer and SCAP tooling, and produce the monthly STIG Compliance Report.

• Perform security impact analysis for changes and new capabilities (including automation and AI), integrate secure development (NIST SP 800-218) requirements, and align designs to DoD Zero Trust and ICAM strategies.

• Lead security engineering for in-scope systems: define security architectures, select and tailor NIST SP 800-53 controls, and design control implementations for endpoint infrastructure, ITSM/dashboard platforms, collaboration and web platforms, and VoIP/VTC/mobile communications.

• Engineer, validate, and maintain STIG/SRG-compliant baseline configurations for Windows, Linux (RHEL), VMware, Active Directory, network printers, communications equipment, and cloud/SaaS components, using STIG Viewer, SCAP, and automated compliance tooling.

• Lead vulnerability remediation engineering: analyze ACAS/Nessus…