Responsibilities

Peraton is seeking an Information System Security Officer (ISSO) to work on a large-scale enterprise Information Technology (IT) program. This role will work closely with the team to monitor, assess, and maintain the security controls, ensuring that systems meet the necessary security requirements as outlined in the Risk Management Framework (RMF).

 

• Assist in the development and maintenance of RMF documentation and artifacts, ensuring proper security controls and safeguards are implemented for all systems.
• Collaborate with the ISSE and other engineering teams to assess and integrate security controls, providing security guidance for design and implementation efforts.
• Monitor and manage the security posture of systems, ensuring that security controls are effective and compliant with applicable standards and regulations.
• Conduct security assessments and audits, identifying vulnerabilities and recommending mitigations to strengthen the overall security posture.
• Review and maintain security-related documentation, ensuring all system components and information types are clearly described and aligned with security policies.
• Provide support for security authorization and accreditation processes, ensuring compliance with federal laws and regulations and assisting in the creation of security
• Provides technical and programmatic information assurance services to internal and external customers in support of network and information security systems.
• Designs, develops, and implements security requirements within an organization’s business processes.
• Prepares documentation from information obtained from customer using accepted guidelines.
• Prepares security test and evaluation plans.
• Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
• Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
• Recommends system enhancements to improve security deficiencies.
• Develops, tests, and integrates computer and network security tools.
• Secures system configurations and installs security tools, scans systems to determine compliancy and report results and evaluates products and various aspects of system administration.
• Conducts security program audits and develops solutions to lessen identified risks.
• Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
• Provides assistance in computer incident investigations.
• Performs vulnerability assessments including development of risk mitigation strategies.

Qualifications

Required: 

• 2 years with BS/BA; Six Years work experience will be considered in lieu of a Bachelors degree
• Top Secret clearance with SCI eligibility is required
• Minimum 2 years’ experience in security engineering of Information Systems
• Proven ISSO experience across a large-scale enterprise Information Technology (IT) program
• Familiar with Scrum methodologies
• Must have a current DoD 8570.1-M IAT Level II certification (i.e., Security+ CE)

 

Desired:

• ITILv4 Foundation Certification desired
• Experience with ServiceNow

Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.