Secret - Sr. ISSO

Summary

Cybersecurity Specialist

Master's degree in a cyber-related field. Ten or more years of cybersecurity/information assurance experience. Must have an active Secret Clearance. DoD 8570 IAM Level III Certification (e.g. CISSP, CISM, or GSLC). Understanding of RMF and ATO processes. Experience evaluating threats, vulnerabilities, and risks.

Prepare, deliver, and maintain comprehensive Authority to Operate (ATO) and RMF packages, ensuring successful lifecycle management of systems. Develop, maintain, and manage Plans of Action and Milestones (POA&Ms) within the Enterprise Mission Assurance Support Service (eMASS) to track, mitigate, and remediate system vulnerabilities and non-compliant controls in accordance with National Institute of Standards and Technology Special Publication 800-53 Revision 5 (NIST SP 800-53r5). Lead the Continuous Monitoring (ConMon) program to ensure security controls are regularly assessed, documented, and maintained in accordance with the Information System Continuous Monitoring (ISCM) strategy. Support and coordinate internal and external security assessments, including the Cyber Operational Readiness Assessment (CORA), Security Control Assessor-Representative (SCA-R) audits, and Program Protection reviews. Create, implement, and validate automated and manual Secure Technical Implementation Guide (STIG) and Security Requirements Guide (SRG) compliance workflows. Analyze, triage, and ensure implementation compliance for Information Assurance Vulnerability Alerts (IAVAs), Cyber Tasking Orders (CTOs), Air Force Time Compliance Network Orders (TCNOs), Notice to Airmen (NOTAMs), and USCYBERCOM directives, ensuring proper tracking and mitigation reporting. Lead cybersecurity incident response efforts, including investigating, reporting, and documenting cyber events. Collaborate closely with the Cybersecurity Lead and Government stakeholders to implement robust mitigation activities and risk-reduction strategies.

Job Description

Cybersecurity Specialist

Master's degree in a cyber-related field. Ten or more years of cybersecurity/information assurance experience. Must have an active Secret Clearance. DoD 8570 IAM Level III Certification (e.g. CISSP, CISM, or GSLC). Understanding of RMF and ATO processes. Experience evaluating threats, vulnerabilities, and risks.

Prepare, deliver, and maintain comprehensive Authority to Operate (ATO) and RMF packages, ensuring successful lifecycle management of systems. Develop, maintain, and manage Plans of Action and Milestones (POA&Ms) within the Enterprise Mission Assurance Support Service (eMASS) to track, mitigate, and remediate system vulnerabilities and non-compliant controls in accordance with National Institute of Standards and Technology Special Publication 800-53 Revision 5 (NIST SP 800-53r5). Lead the Continuous Monitoring (ConMon) program to ensure security controls are regularly assessed, documented, and maintained in accordance with the Information System Continuous Monitoring (ISCM) strategy. Support and coordinate internal and external security assessments, including the Cyber Operational Readiness Assessment (CORA), Security Control Assessor-Representative (SCA-R) audits, and Program Protection reviews. Create, implement, and validate automated and manual Secure Technical Implementation Guide (STIG) and Security Requirements Guide (SRG) compliance workflows. Analyze, triage, and ensure implementation compliance for Information Assurance Vulnerability Alerts (IAVAs), Cyber Tasking Orders (CTOs), Air Force Time Compliance Network Orders (TCNOs), Notice to Airmen (NOTAMs), and USCYBERCOM directives, ensuring proper tracking and mitigation reporting. Lead cybersecurity incident response efforts, including investigating, reporting, and documenting cyber events. Collaborate closely with the Cybersecurity Lead and Government stakeholders to implement robust mitigation activities and risk-reduction strategies.