Information Systems Security Officer Rmf

Job Description

Information Systems Security Officer RMF

Overview:

Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Arlington, VA, Aberdeen, MD, Colorado Springs, CO; Shalimar, FL; and Tupelo, MS.

Mission:

Force Tracking Mission Management Center (FT MMC) Information Systems Security Officer (ISSO) will advise on government security procedures and policies, ensuring compliance and quality control across multiple architectures and government systems.

Responsibilities:

• Operate as an integrated team member in a dynamic, operationally sensitive environment, ensuring the delivery of mission-critical data to warfighters.
• Coordinate and communicate across the Cybersecurity team regarding cyber-related issues.
• Support certification and accreditation efforts by implementing the Risk Management Framework (RMF) across multiple classification domains and updating statuses in the Enterprise Mission Assurance Support Service (eMASS).
• Develop, update, and maintain accreditation artifacts within eMASS.
• Assess security risks, threats, and vulnerabilities from multiple sources, providing leadership with strategic recommendations to prevent security exposures and detect intrusions.
• Develop and execute implementation plans, keeping stakeholders informed throughout the process.
• Review, track, and report compliance with Cybersecurity Task/Operational Orders in accordance with governing entities.
• Stay informed on government and industry cybersecurity trends, laws, and standards, recommending solutions to maintain compliance.
• Collaborate with system and network administrators to conduct vulnerability scanning using the latest DoD security tools, such as Nessus Security Center.
• Perform host-based security monitoring utilizing McAfee Enterprise Policy Orchestrator (McAfee ePO).
• Work with network administrators to develop and sustain DISA-compliant Ports, Protocols, and Services Management (PPSM) data for all assigned systems.
• Partner with configuration management teams to establish and maintain authorized hardware and software inventories for all assigned systems.
• Define and analyze information security requirements for internal and external data connections, ensuring proper documentation is maintained in a central repository.
• Document cybersecurity tactics, techniques, and procedures while maintaining an organized document repository.
• Coordinate with external cybersecurity teams to conduct vulnerability testing and assess the cybersecurity posture of the Mission Management Center (MMC).
• Perform and document Account Access Authorization and Control processes for all assigned information systems.

Required Skills and Qualifications:

• Certifications: CompTIA Security+
• Minimum of five years of progressively complex experience in the Information Systems Security / Cybersecurity domain.
• Experience with EMASS, Trellix (previously McAffee), ePolicy Orchestrator, Assured Compliance Assessment Solution (ACAS), and Security Content Automation Program (SCAP)/Security Technical Impementation Guide (STIG)
• TS/SCI Clearance required.
• Deep understanding of NIST SP 800-37 (RMF Process) and NIST SP 800-53 (Security Controls).
• Experience with DoD RMF processes and CNSSI 1253.
• Knowledge of FISMA, FedRAMP, and other regulatory requirements.
• Familiarity with Enterprise Mission Assurance Support Service (eMASS) for system authorization.
• Ability to manage Plan of Actions and Milestones (POA&M) to address security vulnerabilities.

Desired Skills and Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field (or equivalent experience).
• Certifications: CISSP, CISM, CASP, C|EH, CHFI

Security Clearance Requirement:

This position requires an active DoD Top Secret, Sensitive Compartmented Information (TS-SCI) security clearance. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. Citizenship is required.

Quantum Research International is an Equal Opportunity Employer / Affirmative Action Employer M/F/D/V:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

#LI-MM1
#LI-ONSITE