Description
Overview
Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.
The Cybersecurity and Classified Systems Team under SPA's Information Technology Department establishes and maintains the classified technology infrastructure and application support services required by our analysts to deliver timely, objective and cost-effective analysis. We design, develop, and deploy hardware- and software-based solutions in close coordination with SPA's client-facing groups while adhering to strict security protocols.
SPA has an immediate need for an Information System Security Officer (ISSO).
Responsibilities
With minimal supervision, the Information System Security Officer (ISSO) maintains day-to-day security posture and continuous monitoring of classified information systems. The ISSO conducts reviews and technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional. In this role, you will report to the Information System Security Manager (ISSM) while preparing and maintaining security Assessment and Authorization (A&A) documentation, performing audits, participating in incident response activities, and tracking implementation guidance from multiple sources such as Cyberspace Tasking Orders (CTO). This role also includes interfacing with client and/or Government personnel and maintaining a thorough understanding of NIST 800-53 controls. As the ISSO, you will also be expected to collaborate with team members to support Defense Counterintelligence and Security Agency (DCSA) Technical Reviews and Cyber Operational Readiness Assessments (CORA). This role is specifically designed to fast-track a dedicated ISSO to an ISSM role by providing the first-hand experience required to manage DoD accredited classified information systems throughout the full Risk Management Framework (RMF) lifecycle.
Qualifications
Required Qualifications:
- Bachelor's degree in an Information Technology related field or equivalent work experience and certifications.
- Three (3) years' experience in information system security with one (1) or more year's direct experience supporting classified information systems.
- Must meet Department of Defense 8140 certification requirements at IAM Level I or higher. Acceptable certifications include CAP, GSLC, Security+ CE.
- Experience with the Enterprise Mission Assurance Support Service (eMASS)
- Ability to exercise independent judgment and to work autonomously with minimal supervision.
- Active DoD Top Secret security clearance.
Desired Qualifications:
- Experience validating system compliance using the Security Content Automation Protocol (SCAP) Validation Tool.
- Experience performing Vulnerability Management activities using tools such as ACAS or Tanium.
- Experience configuring systems for compliance using Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and STIG Viewer.
Pay Range Information
At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. California, Pay Transparency Salary range: USD $110,000.00/Yr. - USD $135,000.00/Yr.
Qualifications
Required Qualifications:
- Bachelor's degree in an Information Technology related field or equivalent work experience and certifications.
- Three (3) years' experience in information system security with one (1) or more year's direct experience supporting classified information systems.
- Must meet Department of Defense 8140 certification requirements at IAM Level I or higher. Acceptable certifications include CAP, GSLC, Security+ CE.
- Experience with the Enterprise Mission Assurance Support Service (eMASS)
- Ability to exercise independent judgment and to work autonomously with minimal supervision.
- Active DoD Top Secret security clearance.
Desired Qualifications:
- Experience validating system compliance using the Security Content Automation Protocol (SCAP) Validation Tool.
- Experience performing Vulnerability Management activities using tools such as ACAS or Tanium.
- Experience configuring systems for compliance using Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and STIG Viewer.
Responsibilities
With minimal supervision, the Information System Security Officer (ISSO) maintains day-to-day security posture and continuous monitoring of classified information systems. The ISSO conducts reviews and technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional. In this role, you will report to the Information System Security Manager (ISSM) while preparing and maintaining security Assessment and Authorization (A&A) documentation, performing audits, participating in incident response activities, and tracking implementation guidance from multiple sources such as Cyberspace Tasking Orders (CTO). This role also includes interfacing with client and/or Government personnel and maintaining a thorough understanding of NIST 800-53 controls. As the ISSO, you will also be expected to collaborate with team members to support Defense Counterintelligence and Security Agency (DCSA) Technical Reviews and Cyber Operational Readiness Assessments (CORA). This role is specifically designed to fast-track a dedicated ISSO to an ISSM role by providing the first-hand experience required to manage DoD accredited classified information systems throughout the full Risk Management Framework (RMF) lifecycle.
Apply on company website