ISSO

RESPONSIBILITIES

• Provide DoD Information Technology Portfolio Repository (DITPR) and eMASS registration guidance to system owners. Cyber scorecard experience.
• Experience running ACAS scans, SCAP scans and manually going through STIG checklists.
• Very strong technical understanding of Windows and Linux platforms.
• Provide data categorization guidance to system owner.
• The evaluator must consider and identify impacts as well as consideration of existing risk mitigation strategies.
• Developing Plan of Action and Milestones (POA&M) based on the assessment results.
• Ensure traceability of all vulnerabilities from raw assessment results to the POA&M.
• Conducting required vulnerability analysis to support mitigation and residual risk determination.
• Advanced knowledge with data entry in eMASS and Xacta.
• Supporting the continuous monitoring program as necessary when Information System Continuous Monitoring (ISCM) results will be used to support continuing authorization requirements or ongoing authorizations.
• Expert with RMF accreditation packages.
• Experience in all steps of the RMF process.
• Ability to work effectively independently as well as within a team environment.

REQUIRED QUALIFICATIONS

• Active DoD Secret clearance, DoD Top Secret/SCI security clearance preferred.
• Active DoD 8570 baseline certification for IAT II (one of the following: GSEC, Security+, SCNP and SSCP certifications)
• 8-10 years’ experience
• BS Degree or equivalent experience
• Ability to analyze the customer’s needs and identify security requirements / solutions.
• Experience with DoD STIGs, IA Tools (ACAS, SCC, HBSS) program, and Risk Management Framework
• Experience with CND Directives (CTO’s, FRAGOs, OPORDS, IAVA/Bs).
• Experience analyzing and presenting data in Excel or other business intelligence tools desired.
• US Citizen