Information System Security Officer

Overview
SCCI is currently seeking an Information System Security Officer (ISSO) to support Cybersecurity requirements and tasking for a portfolio of DoD Weapon System 'tactical' projects. The program's mission planning and fire control systems provide safe and effective employment of precision guided munitions and gunfire from aircraft platforms, as well as precision guided munitions from surface and unmanned platforms. The successful Candidate must possess experience and knowledge in Assessment and Authorization (A&A) processes and procedures with the Risk Management Framework (RMF). In this role you will also work as part of a team to implement security controls and policies across the portfolio of projects. Familiarity with DISA Security Technical Implementation Guides (STIGs), certification and accreditation, and the administration and troubleshooting of tactical and non-tactical networks is required. This position is located in Dahlgren, VA.

SCCI offers a comprehensive and competitive benefits package including Health, Dental, Vision, Life and Disability benefits, 401k with Company Match, time off consisting of 2 weeks of paid vacation, 48 hours of sick/personal leave, and 11 paid Holidays.

Responsibilities:

• Provide dedicated Assessment and Authorization (A&A) support services as defined in the RMF for verification, validation, and post accreditation
• Perform validation assessments of implemented controls and maintain required documentation per RMF guidelines
• Assist in developing, maintaining or reviewing accreditation and authorization documentation such as the security plan, security assessment plan, and hardware and software diagrams
• Assist in developing, maintaining or reviewing business plans and procedures such as IT strategic plan, contingency plan, incident response plan, and standard operating procedures
• Manage and document the ATO/IATT package process through Enterprise Mission Assurance Support Service (eMASS)
• Oversee the Information Assurance Vulnerability Management (IAVM) plan ensuring timely compliance and reporting. Collaborate with system administrators to conduct risk assessments, determine mitigation plans and creation of Plans of Action and Milestones (POA&M)
• Conduct the review and verification of Security Technical Implementation Guides (STIGs)
• Review and analyze Tenable Security Center and Nessus Assured Compliance Assessment Solution (ACAS) vulnerability scans
• Contribute and participate in various meetings including the Configuration Control Board (CCB)
• Perform problem resolution and adapt to changing technologies, processes, and organizational requirements