10 years of relevant experience, including 4 years as an ISSO on similar programs
Bachelor's degree in a technical discipline (or 14 years of experience in lieu of degree)
IAM Level 1 CWIP certification and one baseline certification (e.g., CAP, CISSP)
Experience with ICD 503/NIST 800-53 certification processes
Proficient in Risk Management Framework (RMF) practices
Skilled in developing and maintaining System Security Plans (SSPs)
Familiar with task tracking systems like Jira or ServiceNow
Responsibilities
Prepare and recommend system security plans (SSP) for ATO acquisition
Develop and review RMF accreditation package artifacts
Collaborate with ISSM and DAOs to maintain system accreditation
Verify compliance of package submissions for approval
Apply continuous monitoring techniques to assess security posture
Create tasks for developers and system admins for necessary changes
Oversee software patch implementation to uphold security standards
Benefits
Collaborative work environment with minimal supervision
Opportunities for professional development and certifications
Engagement in impactful ICAM projects
Access to advanced security tools and methodologies
Supportive team structure with experienced professionals
Full Job Description
Provide security architecture and systems engineering support for ICAM projects, guiding the team through system accreditation (IATT and ATO). You will own security documentation, continuous monitoring, and accreditation packages, working closely with the ISSM, DAOs, developers, and system administrators.
Responsibilities:
Prepare the system security plan (SSP) and provide recommendations to help obtain ATOs
Identify, develop (directly or in coordination with applicable experts), review, and incorporate common RMF accreditation package artifacts, such as system architecture and boundaries, hardware and software lists, risk assessment reports, POA&Ms, data flows, and other system, network, and application documentation
Work with the ISSM and DAOs to ensure systems obtain and maintain accreditation
Verify that package submissions meet the threshold for approval, including C&A packages for system reauthorization, SAR findings, CTOs, POA&Ms, and SSPs
Apply continuous monitoring techniques to evaluate the system's security posture
Create tasking for developers and system administrators as changes and patching are required
Oversee the implementation of software patches to maintain the organization's security posture
Implement and enforce information systems security policies, standards, and methodologies
Use vulnerability scanning and assessment tools (e.g., ACAS/Nessus) to identify and document compliance
Review audit logs weekly
Perform weekly data transfers, driving from the Hanover office to Fort Meade
Maintain and report assessment and authorization statuses and issues in accordance with organizational guidance
Understand the PRIVAC process and support personnel with new PRIVAC requests and extensions
Qualifications:
Ten (10) years of relevant work experience, including at least four (4) years as an ISSO on programs and contracts of similar scope, type, and complexity
Bachelor's degree in a technical discipline from an accredited college or university
An additional four (4) years of experience may be substituted for the degree, for a total of fourteen (14) years
Required:
IAM Level 1 CWIP certification, plus one of the following baseline certifications: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, CASP+ CE, CISM, CISSP (or Associate), or CCISO
Experience with the ICD 503/NIST 800-53 certification and accreditation process
Experience with the Risk Management Framework (RMF)
Experience developing and maintaining SSPs
Experience with IAVA review and handling
Experience interpreting security scan results
Experience interfacing with system administrators and software engineers
Experience with task tracking systems (e.g., Jira, Redmine, ServiceNow)
Understanding of Public Key Infrastructure (PKI)-based authentication
Understanding of a variety of security policies, especially within the IC
Understanding of the fundamentals of technical security risk assessment
Understanding of how to perform an analysis of alternatives
Ability to clearly communicate ideas and status updates to management and other stakeholders
Desired Skills:
Must be able to work in a collaborative environment, with minimal supervision
About Reflexive Concepts
Reflexive Concepts Careers
Joining Reflexive Concepts presents an unparalleled opportunity to become part of a leading team of professionals dedicated to innovation and technology. This is a pivotal time to engage with a company that values growth, leadership, and diversity in its workforce.
Explore Job Opportunities
Reflexive Concepts is actively seeking talented individuals for various positions across the company. With a commitment to professional excellence, Reflexive Concepts offers a dynamic environment where skills are honed, and careers flourish. Explore the multitude of job opportunities that range from internships to full-time positions, each offering a unique chance to contribute to groundbreaking projects.
Experience the Culture and Benefits
At Reflexive Concepts, the culture thrives on diversity, innovation, and leadership. Employees enjoy a range of benefits designed to support their professional and personal growth. The company is dedicated to fostering an inclusive environment where every team member’s contribution is valued. Benefits include comprehensive health care, flexible working conditions, and continuous professional development through diversity training and leadership workshops.
Engage in Professional Growth
Career advancement is a cornerstone of employment at Reflexive Concepts. The company supports a trajectory of professional growth through robust training programs, access to global resources, and opportunities to lead. Networking within the industry and participating in global teams allow employees to gain valuable insights and experiences that propel their careers forward.
Innovative Work Environment
Reflexive Concepts is at the forefront of technological advancement and industry innovation. Employees are encouraged to push the boundaries of what is possible, bringing fresh ideas and perspectives to their work. The collaborative atmosphere fosters a sense of community and drives collective success.
Join the Team
Reflexive Concepts is hiring! Search open positions that align with your skills and interests. The company looks for passionate, curious, and solution-driven team players. Prepare your resume, sharpen your interview skills, and get ready to embark on a rewarding career path with Reflexive Concepts.
Stay Connected
Keep up to date with career tips, insider perspectives, and industry-leading insights from Reflexive Concepts. Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding opportunities that await at Reflexive Concepts.
SEARCH REFLEXIVE CONCEPTS JOBS
READ CAREERS BLOG
Job Alert Emails
Sign up to receive personalized job alerts and stay informed about the latest employment opportunities and company news. See what exciting and rewarding career opportunities await at Reflexive Concepts.
