Overview/ Job ResponsibilitiesEntarian is seeking an experienced Information Systems Security Officer (ISSO) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command (MCSC) Information Technology (IT) systems.
The ISSO Contractor role will serve as a primary cybersecurity and Risk Management Framework (RMF) specialist, supporting the Portfolio Acquisition Executive Mission Systems (PAE MS) Information Systems Security Manager (ISSM). This position is an Assessment and Authorization (A&A) focused role. The ISSO will help guide packages through the RMF process, with the goal of obtaining accreditation by Authority to Operate (ATO) and maintaining continuous monitoring on each package.
Job Responsibilities include:- Develop, review, and maintain A&A documentation including NIST SP 800-53 Rev5 Controls, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&M).
- Gather and upload artifacts, as well as main system information within eMASS.
- Support setting up, executing, and processing results of important security events including Annual Security Reviews (ASR) and Independent Verification and Validation (IV&V).
- Maintaining system level POA&Ms on a continuous basis.
Salary Range: Approximately $89,000.00 - $121,000.00/year.
Location & Telework: This position requires full-time, on-site performance in North Charleston, SC and may be eligible for a maximum of one (1) day of telework per week, subject to Government and management approval and mission requirements.
Minimum Qualifications- Clearance Required
- Active U.S. Government Top Secret security clearance
- Education & Experience
- Education & Experience: Must meet one of the following tracks:
- A Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics (with a CS concentration), or equivalent, PLUS 3+ years of experience in cybersecurity policy and Assessment & Authorization (A&A) compliance.
- High School diploma, GED, trade school graduate, or 4 years of equivalent military service, PLUS 10+ years of professional technical problem-solving experience.
- Core Technical Requirements (Required for both tracks):
- Direct experience preparing, implementing, and ensuring compliance with cybersecurity policies and A&A requirements.
- A strong practical foundation in engineering, software lifecycle maintenance, and fabrication methodologies.
- Certification Requirements
- Individual shall be certified as Information Assurance Management (IAM) or Information Assurance Technical (IAT) or Information Assurance System Architect and Engineer (IASAE) Level I (position-based) per DoD 8570.1M
- Technical Skills
- Extensive experience drafting system security plans (SSPs), executing continuous monitoring strategies, and defending packages directly to the Navy Authorizing Official (AO) or functional Security Control Assessor (SCA).
- Comprehensive experience managing the full Assessment & Authorization (A&A) lifecycle, including preparing and maintaining DoD RMF accreditation packages in strict compliance with DoDI 8510.01, NIST SP 800-53 Rev 5, CNSSI 1253, and ICD 503.
- Hands-on experience utilizing automated tools such as eMASS and/or MCCAST to govern accreditation packages and navigate complex system workflows.
- Demonstrated expertise in documenting, analyzing, and remediating system vulnerabilities in accordance with Information Assurance Vulnerability Management (IAVM) notices and DISA Security Technical Implementation Guides (STIGs).
Desired Qualifications- Government & Compliance
- DoD/IC Experience: Experience supporting DoD, Intelligence Community, or classified government systems.
- RMF Expertise: Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
- Security Architecture & Engineering
- Secure Systems Design: Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
- Core Technologies: Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.
- Vulnerability Management: Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools.
- Professional Skills & Certifications
- Certifications: Active security certifications (e.g., Security+, CISSP, CASP+, CCSP, GIAC, or IASAE).
- Communication: Strong technical writing and verbal skills to convey complex cybersecurity concepts to both technical and leadership audiences.
