Bachelor's degree with 9 years of experience, Master's degree with 7 years, or 13 years of experience without a degree
DoD 8570 IAT Level II certification (e.g., CCNA Security, CySA+, Security+ CE)
Current TS/SCI eligibility or Active TS/SCI
Ability to obtain a CI polygraph
Proficiency with Xacta IA Manager (preferred)
Responsibilities
Support Assessment and Authorization (A&A) and Risk Management Framework (RMF) processes for multiple information systems
Review security documentation for validity and accuracy
Create and maintain System Security Plan (SSP) and related security documentation
Plan and perform security functional testing and maintain Security Test Plans (STPs)
Utilize Xacta to manage Security Body of Evidence (BoE) files
Provide guidance on security policy application and technical requirements
Manage plan of action and milestones (POA&Ms) with project teams
Benefits
Immediate placement opportunity
Engagement with multiple analytic mission systems
Leadership role in security assessment and authorization
Opportunity to work with established security frameworks
Potential for professional growth in a technical environment
Full Job Description
What you will be doing:
Mantis Security is seeking for immediate placement a highly qualified and technical Information Systems Security Officer (ISSO) to lead the Assessment and Authorization (A&A) for multiple analytic mission systems. The ISSO must be proficient in standard A&A activities, and will generate and maintain the complete security body of evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF).
Duties Include:
Support to the Assessment and Authorization (A&A) and all Risk Management Framework (RMF) processes (ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, etc.) for all multiple information systems
Ensure validity and accuracy review of all associated security documentation
Create and maintain System Security Plan (SSP), Security CONOPS, Security Test Plan (STP) and Security Test Procedures, document and maintain implementation details of NIST 800-53 security controls
Plans and performs security functional testing, creates and maintains STPs, supports security assessments
Utilize Xacta to maintain Security Body of Evidence (BoE) files and to work through the A&A process for each system release cycle
Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation
Manage the plan of action and milestones (POA&Ms) by working with project managers and engineers to develop schedules and engineering actions that mitigate open findings
Monitor and audit operational systems for proper use
Must have:
Bachelor's degree with 9 years of experience, or Master's degree with 7 years of experience, or no degree with 13 years of experience
DoD 8570 IAT Level II certification requirements (one of CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP)
Must have current TS/SCI eligibility or Active TS/SCI
