Description
Description
SAIC is currently looking for an Information Systems Security Officer (ISSO) to support the work on the Aviation Systems and Software Integration Facility (AS2IF) located in Huntsville, Alabama (Redstone Arsenal).
Responsibilities Include:
- Operate as the ISSO for the AS2IF and report to the project manager
- Work independently with general direction and as a team member
- Maintain the AS2IF eMASS package
- Work with the AS2IF System/Network Administrators to provide secure technical solutions that are in-line with the AS2IF's cybersecurity policies
- Evaluate cybersecurity policies and procedures to ensure they are compliant with DoD, Army, and other requirements
- Work with other members of the cybersecurity team to identify, document, and mitigate cybersecurity vulnerabilities using the Risk Management Process (RMF) and compliance with the AS2IF's Authority to Operate (ATO)
- Act as a liaison between the AS2IF cybersecurity team and organization/program level Information System Security Managers (ISSMs) to ensure the AS2IF's cybersecurity posture is understood and compliant with organization/program requirements and policies
- Provide robust implementation of good security practices and technical insight on remediation of cybersecurity concerns via direct interaction with the software development team
- In-processing people, maintain cyber artifacts for lab/facility/account access
Qualifications
Education:
- Bachelors and two (2) years experience; Additional four (4) years of experience can be used in lieu of degree
Clearance Requirements:
- Interim Secret clearance required to start with the ability to obtain a secret clearance
- US Citizenship required
Required Experience:
- CompTIA Security+ CE or other DoD 8140 IAT level II workforce certification
- Experience with the DoD Risk Management Framework (RMF) and the accreditation process for DoD systems, based on NIST 800-53 and DoDI 8510.01
- Familiar with EMASS (Enterprise Mission Assurance Security System)
Desired qualifications:
- User-level experience with EMASS (Enterprise Mission Assurance Security System) as an ISSO
- Experience with or a desire to learn ACAS (Assured Compliance Assessment Solution)
- Experience with or a desire to learn ESS (Endpoint Security Solutions) Administration (formerly HBSS)
- Additional professional cybersecurity certifications
- Understanding of the following:
- STIGs (Security Technical Implementation Guides)
- IAVMs (Information Assurance Vulnerability Management)
- CVE's (Common Vulnerabilities and Exposures; per MITRE/SANS
- CWE's (Common Weakness Enumeration), per MITRE/SANS
- Army SwA Secure Coding Standards
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.
Apply on company website