Responsible for ensuring the security and integrity of Federal/National Security organization’s information systems, managing risk, and ensuring compliance with all relevant regulations and standards. This role requires a proactive approach to security management and the ability to work closely with both technical and non-technical stakeholders. The ISSO / RMF Analyst shall provide hands-on cybersecurity support for SOCOM systems, focused on RMF lifecycle activities, continuous monitoring, vulnerability management, compliance reporting, and cybersecurity documentation development.
Support a team of IT risk management assessors performing IT risk and control assessments using government guidance and organizational policies and procedures.
Conduct walkthrough interviews and coordinate with client stakeholders, including subject matter experts (SMEs) such as system and database administrators.
Request, collect, review, and analyze artifacts to support IT control testing, including security plans, SOPs, system screenshots, and system configuration settings.
Evaluate the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgment.
Document IT control testing results clearly and consistently, with sufficient detail for a reviewer to reproduce the test and reach the same conclusion.
Summarize and communicate IT control assessment results to client stakeholders, including senior leadership.
Plan and execute assigned day-to-day IT control assessment activities, both independently and as part of a team.
Work with client personnel to understand known IT control weaknesses, identify contributing causes, and develop practical remediation plans.
Provide guidance to client personnel on IT control matters and respond to routine and ad hoc IT control requests.
Support the implementation and execution of continuous monitoring activities to help maintain the security of information systems.
Demonstrate working experience with the Risk Management Framework (RMF) process and NIST SP 800-53 and 800-37.
Create and update Security Assessment and Authorization (SA&A) artifacts such as FIPS 199, Contingency Plans (CP), Contingency Plan Tests (CPT), and System Security Plans (SSP).
Review ACAS vulnerability scan results, validate findings with system administrators, track remediation actions, and document vulnerability status in accordance with established procedures.
Apply knowledge of IT risk and controls through IT audits, IT control assessments, and IT security reviews.
Demonstrate working knowledge of FISMA, NIST SP 800 series, FISCAM, and other relevant federal information assurance laws, regulations, and guidance.
Demonstrate experience supporting FISMA, OMB Circular A-123, or similar internal control assessments.
Demonstrate familiarity with security frameworks and assessment approaches relevant to SOCOM systems, including DISA DCAS.
Demonstrate familiarity with applicable DoD STIGs/SRGs, including experience using the STIG Viewer toolset.
Proficiency in eMASS.
Proficiency in Microsoft Excel, Word, and PowerPoint.
Qualifications
Required qualifications
Min 12 years with HS Diploma, 10 years with AS/AA degree, 8 years with BS/BA degree, 6 years with a MS/MA degree, 3 years with PhD
Active DoW TS/SCI clearance
3 or more years of relevant experience related to IT Risk Management, Information System Security, and/or Cybersecurity
Must be DoW 8140 compliant under the Work Role Code 722 – Information Systems Security Manager - Intermediate level or higher
DoW 8570 IAT II Certification or higher
Target Salary Range $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
