Support cybersecurity operations, risk management, and compliance activities within a Department of Defense environment.
Compensation
The proposed salary range for this position is: $86,600 - $181,800
Responsibilities
Support the ISSM in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.
Provide cybersecurity oversight and support for Assessment and Authorization (A&A) activities in accordance with FISMA, DoD requirements, and the Risk Management Framework (RMF).
Develop, review, and maintain System Security Plans (SSPs), security authorization packages, and supporting documentation required to obtain and maintain Authorities to Operate (ATOs).
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity strategies.
Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools to identify risks and recommend remediation.
Requirements
High school diploma or GED with a minimum of 6 years of relevant experience
Bachelor's degree with a minimum of 2 years of relevant experience
Nice to have: Experience independently managing complex ATO submissions and coordinating with Security Control Assessors (SCAs) and Authorizing Officials (AOs)
Nice to have: Experience supporting multiple interconnected systems or enterprise-level cybersecurity environments
Nice to have: Experience leading cybersecurity readiness reviews, compliance inspections, or security audits
Support cybersecurity operations, risk management, and compliance activities within a Department of Defense environment.
Compensation
The proposed salary range for this position is: $86,600 - $181,800
Responsibilities
Support the ISSM in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.
Provide cybersecurity oversight and support for Assessment and Authorization (A&A) activities in accordance with FISMA, DoD requirements, and the Risk Management Framework (RMF).
Develop, review, and maintain System Security Plans (SSPs), security authorization packages, and supporting documentation required to obtain and maintain Authorities to Operate (ATOs).
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity strategies.
Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools to identify risks and recommend remediation.
Requirements
High school diploma or GED with a minimum of 6 years of relevant experience
Bachelor's degree with a minimum of 2 years of relevant experience
Nice to have: Experience independently managing complex ATO submissions and coordinating with Security Control Assessors (SCAs) and Authorizing Officials (AOs)
Information System Security Officer (ISSO)Caci · Annapolis Junction, US