Experience working in information assurance or cybersecurity roles supporting classified Department of Defense environments.
Working knowledge of National Institute of Standards and Technology Special Publication 800-53 controls and the Risk Management Framework.
Experience analyzing and interpreting outputs from endpoint security, vulnerability, and enumeration tools such as Tenable Nessus, Security Center, SolarWinds, endpoint security solutions, Vulnerator, and SCAP Compliance Checker.
A bachelor's degree in Cybersecurity or another related field and 3 or more years of experience, or a master's degree.
An IAM Level II (Security+ CE) or higher baseline certification.
U.S. citizenship is required.
Must pass a pre-employment drug test.
Must have a fully adjudicated (not interim) U.S. Government-issued security clearance at time of hire.
Responsibilities
Work as part of an integrated team to develop and maintain Risk Management Framework body-of-evidence documentation, such as System Security Plans, Security Controls Traceability Matrices, Plans of Action and Milestones, and authorizations to operate, using Microsoft Word, Excel, PowerPoint, and Visio.
Maintain repositories of body-of-evidence documentation for assigned systems and ensure access is limited to properly authorized individuals.
Develop and execute security-control assessment procedures to verify conformance with control requirements during continuous monitoring and authorization assessments.
Coordinate with system administrators and cyber team members to ensure systems are operated, maintained, and disposed of according to applicable security policies and procedures, and notify the Information System Security Manager when changes may affect system authorization posture.
Support the Chief Information Security Officer, program manager, Information System Security Manager, or Information Security Officer in maintaining current authorization to operate and approval to connect, and in implementing corrective actions identified in the Plan of Action and Milestones. Coordinate development of an Information System Configuration Management strategy and monitor proposed or actual changes to systems and their environments with the Chief Information Security Officer, program manager, Information System Security Manager, and Authorizing Official staff.
Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones.
Ensure cybersecurity is integrated throughout the information technology lifecycle on behalf of the Information System Security Manager and Information Security Officer.
Ensure the development and implementation of an effective information-security education, training, and awareness program.
Ensure configuration-management policies and procedures for authorizing hardware and software use on systems are followed, and coordinate hardware, software, or firmware additions, changes, and modifications with the Information System Security Officer or Information System Security Manager before implementation.
Ensure software, hardware, and firmware comply with applicable security configuration guidelines, such as Security Technical Implementation Guides and security requirement guides.
Report security incidents or vulnerabilities to the Chief Information Security Officer, Information System Security Manager, or wing cybersecurity office according to Air Force Instruction 17-203, Cyber Incident Handling.
Desired Qualifications
Strong interpersonal and written and oral communication skills to coordinate with program and site leads, government staff, and mission partners.
Experience working on or with government contracts.
Ability to consistently meet deadlines, work independently as needed, and maintain attention to detail.
Ability to multitask and work with vendors, executive managers, subcontractors, consultants, and other professionals.
Information System Security Officer
Kegman Inc. is a Woman-Owned/Service-Disabled Veteran-Owned Small Business headquartered in Melbourne FL that provides engineering and technical support services to U.S. Government clients. We are seeking an Information System Security Officer (ISSO) to join our team at Patrick Space Force Base in Melbourne, FL.
NOTE: This is not a remote/telework job. This job requires the selected applicant to have an active U.S. Government-issued security clearance at time of hire and, therefore, requires U.S. citizenship.
The ISSO will be involved in all aspects of cybersecurity operations and will partner with program/site leads as well as government staff and mission partners to maintain an effective information security program. This position will document, implement, and assess security controls to perform system monitoring and compliance assessment activities. In addition, this ISSO will provide Risk Management Framework (RMF) support.
Responsibilities
Work as part of an integrated team to develop and maintain RMF body of evidence documentation (example: System Security Plan, Security Controls Traceability Matrix, Plan of Action and Milestones, ATO’s) using Microsoft products such as Word, Excel, PowerPoint, and Visio.
Maintain repositories of all body of evidence documentation for systems under your purview and ensure they are accessible only to properly authorized individuals.
Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities.
Work in close coordination with system administrators and other cyber team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures and notify the ISSM when changes occur that might impact system authorization posture.
Support the CISO, PM, ISSM or ISO in maintaining current authorization to operate, and approval to connect, and in implementing corrective actions identified in the plan of action and milestones. Coordinates, with the CISO, PM, ISSM and AO staffs, development of an IS Configuration Management strategy and monitor any proposed or actual changes to the system and its environment.
Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M).
Ensure integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the ISSM and ISO.
Ensure the development and implementation of an effective information security education, training, and awareness program.
Ensure configuration management policies and procedures for authorizing use of hardware/software on a system are followed and coordinate any additions, changes or modifications to hardware, software, or firmware with the ISSO/ISSM prior to the addition, change or modification.
Ensure software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides (STIG)/security requirement guides).
Reports security incidents or vulnerabilities to the CISO/ISSM/wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.
Basic Qualifications
Experience working in information assurance or cybersecurity roles supporting classified DoD environments
Working knowledge of NIST 800-53 controls and RMF
Experience analyzing and interpreting outputs of various endpoint security, vulnerability, and enumeration tools (example: Tenable Nessus, Security Center, SolarWinds, EndPoint Security Solutions, Vulnerator, SCAP Compliance Checker)
Preferred Qualifications
Strong interpersonal and written/oral communication skills to coordinate with program/site leads as well as government staff and mission partners
Experience working on/with Government contracts
Detail-oriented team member who can consistently meet deadlines and is able to work independently as needed
Able to multi-task and work with a diverse work group of vendors, executive managers, subcontractors, consultants, and other professionals.
Education
Bachelor’s degree in Cybersecurity or other related field and 3+ years of experience, or Master’s degree, or
IAM Level II (Security+ ce) or higher baseline certification (CISSP preferred)
Other
U.S. citizenship required.
Must pass a pre-employment drug test.
Must have a fully adjudicated (not an interim) U.S. Government-issued security clearance at time of hire.
Kegman Inc. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.
Kegman will abide by the requirements of 41 CFR 60741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
Please be aware many of our positions require an active security clearance. Security clearances are be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment that requires a security clearance will be subject to government security investigation(s) and must meet and maintain eligibility requirements for access to classified information.
By submitting your résumé for this position, you understand and agree that Kegman may share your résumé, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.
Kegman maintains a drug-free workplace and performs pre-employment substance abuse testing where permitted by law.