Information System Security Officer (ISSO) / Cyber Security Analyst

About the position

The position involves leading the program to obtain an Authority to Operate (ATO) via the Navy Risk Management Framework (RMF) process. Responsibilities include authoring, updating, and reviewing documentation to support RMF accreditation, such as System Security Plans (SSP), Security Assessment Reports (SAR), Contingency Plans, and Plans of Action and Milestones (POA&M). The role also requires organizing and managing additional Assessment & Authorization (A&A) activities, providing oversight and guidance on vulnerabilities at a program level, reviewing ACAS vulnerability reports, creating POA&Ms and mitigation plans, and providing hands-on assistance with systems, applications, and networks to resolve issues as needed.

Responsibilities

• Leading the program to obtain an ATO via the Navy RMF process
• Authoring, updating, and reviewing documentation to support RMF accreditation
• Organizing and managing efforts for additional A&A activities
• Providing oversight, guidance, and compliance on vulnerabilities from a program level
• Reviewing ACAS vulnerability reports, creating POA&Ms and mitigation plans as needed
• Providing hands-on assistance with systems, applications, and networks to help resolve issues

Requirements

• Bachelor's degree or higher in a relevant technical discipline or 8+ years' experience
• Five (5)+ years of information assurance/cybersecurity experience
• Experience with NIST security controls, RMF, DIACAP, and Navy/DoD security compliance processes
• Experience supporting system ATO processes, creating artifacts, control implementation details, and POAMs
• Familiarity with Cyber Security tools and applications, including eMASS, VRAM, Nessus ACAS, SCAP, HBSS/ESS, STIG viewer
• Prior experience as an Information System Security Officer (ISSO) or Cyber Security Analyst
• Strong verbal and written communication skills
• U.S. citizen, Active DoD Secret clearance, ability to upgrade to Top Secret
• Eligible for CSWF IAT II (Security+ Min)

Nice-to-haves

• CISSP or equivalent certification

Benefits

• Medical, dental, and vision plans
• 401(k) with a company match
• Life insurance
• Vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually
• 11 paid holidays
• Tuition reimbursement
• Work environment that encourages excellence