REPRESENTATIVE DUTIES AND TASKS
As a member of the Information Assurance Security team the ISSOsupports system security categorization efforts, security requirements selection/analysis, security control assessments and performs continuous monitoring.
Executes or supports the execution of A&A activities, including development of required security documentation, including items such as System Security Plans, Security Assessment Reports, SCTMs and POA&Ms in compliance with IA policy
Perform weekly system audit reviews, media reviews, hardware/software configuration management
Executes security testing and evaluation to ensure correct implementation of security controls
Supports the assessment and mitigation of vulnerabilities throughout a systems life cycle
Conduct IA security education training for all system users on appropriate risk mitigation strategies
Perform incident response and cleanup actions when necessary per company or customer directions
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and procedures outlined in the System Security Plan (SSP).
Assume ISSM responsibilities as assigned by the Region Manager and/or in the absence of the ISSM
KNOWLEDGE SKILLS AND ABILITIES
Proficient understanding of cyber security specifications such as Risk Management Framework (RMF), JSIG (Joint SAP Implementation Guide), ICD-503, NIST SP 800-53
Experience implementing government security requirements to include technical computer/network system auditing
Trained and proficient in Assured File Transfer (AFT) processes and tools
Experience with various security assessment/hardening tools - STIGs, SCAP, ACAS, Nessus, etc.
Systems administration experience is highly desirable
Very strong writing, speaking, analytical, and customer service skills
Ability to participate in or lead security work groups
Must be a self-starter capable of multitasking and efficiently managing your time in a dynamic environment while requiring minimal levels of supervision
Maintains contact with external customer security professionals
