Serve as a Lead Information Systems Security Manager (ISSM)
Responsible for Risk Management Framework (RMF) authorization of assigned Information Systems (IS)
Ensure systems are operated, maintained, and disposed of according to security policies
Conduct periodic assessments of authorized systems
Address corrective actions for identified findings and vulnerabilities
Perform continuous monitoring activities for authorized systems
Analyze collected audit records and system vulnerability management cycle
Monitor incident recovery processes

Requirements

Experience with NIST 800-53, ICD 503, and RMF practices
Security Technical Implementation Guides (STIGs)
expertise in computer networking and operating systems
development of Assessment and Authorization (A&A) artifacts
assess, document test or analysis data to show cybersecurity compliance
set up auditing dashboards and review results in SPLUNK
conduct risk analysis
review ACAS, CVEs, plugins, CWEs
collaborate with System Administrators to mitigate identified vulnerabilities or author Plans of Action and Milestones (PO&AM)
knowledge of National Industrial Security Program Operating Manual (NISPOM)
knowledge of Joint Special Access Program Implementation Guide (JSIG)
knowledge of Intelligence Community Directives (ICD) 503 and 703
knowledge of RMF process and associated NIST publications
knowledge of DD 254 requirements from an information security perspective
ability to configure and run security scans with Tenable products
TS/SCI clearance with a polygraph
HS diploma or GED
IAM Level III Certification (including CISSP, GSLC, or CISM Certification)

Benefits

health, life, disability, financial, and retirement benefits
paid leave
professional development
tuition assistance
work-life programs
dependent care
recognition awards program

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk Management Framework (RMF)NIST 800-53ICD 503Security Technical Implementation Guides (STIGs)Assessment and Authorization (A&A)cybersecurity compliancerisk analysissecurity scansTenable productscomputer networking

Soft Skills

collaborationcommunication

Certifications

IAM Level III CertificationCISSPGSLCCISM Certification