12 дней назад
USAF - ISSO (Cybersecurity)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
USAF - ISSO (Cybersecurity): Developing and maintaining RMF authorization packages, ATOs, SSPs, POA&Ms, and compliance records for United States Air Force DC3 systems with an accent on eMASS, STIG compliance, vulnerability management, and continuous monitoring. Focus on evaluating security findings, coordinating remediation, supporting continuous ATO through DevSecOps evidence, and preparing systems for Government review.
Location: On-site in Linthicum Heights, Maryland, United States
Company
supports a United States Air Force program through its USAF - DC3 department.
What you will do
- Develop, maintain, and update Authorization to Operate and Assess-Only Authorization packages for assigned DC3 systems.
- Execute steady-state RMF activities, including security control assessments, STIG compliance, continuous monitoring, and remediation tracking.
- Prepare System Security Plans, support Security Assessment Plans, and assemble authorization evidence for systems without an ATO.
- Maintain current system records, authorization evidence, configuration boundaries, inventories, and POA&Ms in eMASS.
- Review vulnerability and configuration compliance results, coordinate remediation, validate closure evidence, and track unresolved findings.
- Support continuous ATO through automated compliance evidence, incident response, audits, briefings, and Government review activities.
Requirements
- Active TS/SCI clearance.
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- Experience performing ISSO duties and developing or maintaining RMF authorization packages.
- Experience preparing SSPs, assessment documentation, control evidence, and POA&Ms in eMASS.
- Knowledge of security control assessment, continuous monitoring, STIG compliance, and vulnerability management.
- Ability to evaluate security findings, coordinate remediation, and maintain accurate system risk records.
- Understanding of authorization boundaries, configuration control, and the security impacts of system changes.
- Ability to work with system owners, ISSMs, engineers, assessors, and Government stakeholders.
- Strong technical writing, evidence management, and communication skills for reviews and reporting.
Culture & Benefits
- Full-time, on-site work supporting a United States Air Force program.
- Collaboration with system owners, ISSMs, engineers, assessors, operations personnel, and Government stakeholders.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка