Sr. Information Systems Security Officer (ISSO)

Overview

At FTI, we are united by one common mission; supporting those that protect our nation so they can make the best-informed decisions during critical moments when seconds count. We want you to bring your passion and expertise to contribute to that essential mission. We strive to incorporate our values to create a culture of collaboration and trust, where you can share your ideas and innovate. If you are inspired by making a positive impact through developing data driven solutions, FTI would appreciate the opportunity to learn more about you.

We are seeking a self-motivated, well-organized, detail-oriented ISSO to join our team. As a subject matter expert on Cyber Security and Information Assurance (IA) requirements, you will support a variety of Information Assurance functions to include, but not limited to, Assessment and Authorization (A&A), vulnerability management, assessment/inspection, infrastructure readiness and support. You will work with other cyber security engineers and analysts, architects, and developers on-site at Air Force Material Command’s headquarters (AFMC HQ) located at Wright Patterson Air Force Base (WPAFB).

Responsibilities

• Provide ongoing development and support of Risk Management Framework (RMF) packages for both new and existing information systems.
• Implement DISA STIGs to comply with technical security requirements for all systems within accreditation boundaries.
• Maintain accreditation of systems using eMASS, Exacta, or other Authorized Official (AO) approved tools.
• Understand and create topology drawings to support accreditation requirements.
• Understand and support Ports, Protocols, and Services Management policies and procedures.
• Provide support for proposing, coordinating, and implementing information systems security policies, standards, and methodologies.
• Create and update policy documents as required to support cybersecurity objectives and responsibilities.
• Support emerging Cybersecurity Requirements.
• Develop Plan of Action and Milestones (POA&M) and support applicable milestones.
• Ensure security vulnerabilities are tracked and remediated.
• Provide information security expertise throughout the lifecycle process.
• Must be able to interface with other teams to create an overall solution to meet Assessment and Authorization (A&A) requirements.
• Ability to align hardware and software requirements with cybersecurity requirements.
• Effectively and professionally communicate with program team members and government leaders.
  
  

Required

Education/Qualifications

• Must be a U.S. citizen with active Dept. of Defense Secret clearance or above.
• Extensive knowledge of RMF & NIST 800-53 Rev. 5 including:
• Enterprise Mission Assurance Support Service (eMASS) experience.
• DISA STIGs implementation experience.
• Plan of Action and Milestones (POA&M) development experience.
• Must have one DoD 8140/8570.01 IAT level II certification, such as CompTIA Security CE.
• BS or MS in Computer Science, Mathematics, Engineering, Business, or a related field.
• 4 years of additional experience in lieu of a bachelor’s degree will also be considered.
• 10 years of combined information system experience including DoD policy, compliance documentation, and risk management.
• Ability to align hardware and software requirements with cybersecurity requirements.
• Knowledge of the following:
• Virtualization concepts.
• Windows networks.
• Proficient with the use of MS Office Suite (MS Project, Word, OneNote, Access, Visio, PowerPoint, and SharePoint).
• Strong verbal and written communication skills.
  

Preferred

• MS in Computer Science, Mathematics, Engineering, Business or a related field.
• CISSP or CISM certification.
• Scripting experience with Powershell, or a similar language such as Python.
• Cross domain experience supporting Commercial Solutions for Classified (CSFC) and/or National Security Agency (NSA).