• ISSO

    ASM Research, An Accenture Federal Services CompanyAshburn, VA 20147

    Job #2693378997

  • Seeking an Information Systems Security Officer (ISSO) in support of multiple systems within a large federal government agency. Candidate will work closely with a supportive and talented team of ISSOs supporting multiple agency systems.

    • Perform all tasks related to perform a system Certification and Accreditation and assuring the system is compliant with all required security controls as defined by agency policies.

    • Review system configurations to ensure they are in accordance with agency hardening guidelines.

    • Review all proposed change requests related to system design / configuration and perform security impact analysis.

    • Perform Ongoing Authorization tasks including system security plan updates, weakness remediation, and audit log reviews.

    • Review system vulnerability scan reports monthly and track and address weaknesses in POA&Ms as needed.

    • Create Authority to Test, Privacy Threshold Analysis, and Waivers.

    Minimum Qualifications

    • Bachelor's Degree in Computer Science or a related field or equivalent experience; Advanced Degree preferred.

    • 10+ years of experience in systems security.

    • 5+ years of experience in IT with a background in technology and a strong history of secure technical implementations.

    • 5+ years of experience working with security compliance and associated industry/government standards.

    • 5+ years specific experience with NIST 800-53 policies.

    • Ability to maintain a government clearance or investigation.

    Other Job Specific Skills

    • Excellent communication skills with the ability to state messages in a clear and concise manner over any form of communication.

    • Ability to multi-task, prioritize, and re-prioritize work in a fast-paced environment.

    • Experience in engineering IT systems (RedHat, Windows, Unix/Linux) as well as working knowledge of current technologies.

    • Ability to learn an application environment in order to update or create supported security documentation.