cFocus Software Incorporated
USAF - ISSO
Linthicum Heights, MD · Full-time
Posted · Listed from JazzHR
About the job
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience performing ISSO duties and developing or maintaining RMF authorization packages.
- Experience preparing SSPs, assessment documentation, control evidence, and POA&Ms in eMASS.
- Knowledge of security control assessment, continuous monitoring, STIG compliance, and vulnerability management.
- Ability to evaluate security findings, coordinate remediation, and maintain accurate system risk records.
- Understanding of authorization boundaries, configuration control, and security impacts of system changes.
- Ability to work with system owners, ISSMs, engineers, assessors, and Government stakeholders.
- Strong technical writing, evidence management, and communication skills for reviews and reporting
- Develop, maintain, and update Authorization to Operate (ATO) and Assess-Only Authorization packages for assigned DC3 systems.
- Execute steady-state RMF activities for systems with valid authorizations, including ongoing security control assessments, STIG compliance, and remediation tracking.
- Prepare initial System Security Plans (SSPs), support execution of Security Assessment Plans, and assemble authorization evidence for systems lacking an ATO.
- Maintain complete, current system records in the Enterprise Mission Assurance Support Service (eMASS); resolve documentation and evidence gaps with technical teams.
- Maintain system-level Plans of Action and Milestones (POA&Ms), track corrective actions and dependencies, and provide updates for enterprise consolidation by the ISSM.
- Review vulnerability assessment and configuration compliance results; coordinate remediation, validate closure evidence, and identify overdue or unresolved findings.
- Support continuous ATO (cATO) through automated compliance evidence and monitoring data in coordination with DevSecOps and operations personnel.
- Assess assigned system changes for security and authorization impacts; maintain consistent boundaries, configurations, inventories, and supporting records.
- Track applicable cyber orders, taskers, and directives; coordinate required system changes and prepare compliance documentation or POA&Ms when immediate compliance is not achievable.
- Provide the ISSM with system risk information, remediation options, and supporting evidence for enterprise risk analysis and Government risk acceptance decisions.
- Coordinate with system owners, assessors, engineers, and the ISSM to prepare packages for Government review and address review findings before planned deployment.
- Support incident response by providing system security documentation, assessing control implications, and tracking directed corrective actions.
- Maintain security procedures and assessment records; support audits and provide status briefings, compliance evidence, and technical documentation as assigned.
cFocus Software Incorporated wrote this description; Job Elf found it on JazzHR. Check details with the employer before you share anything sensitive. Never pay to apply for a job.
More jobs at cFocus Software Incorporated
Full-time
Posted today Apply on company site
Full-time
Posted 1 week ago Apply on company site
USAF - CODE Service Task Lead / CODE Strategy Support
cFocus Software Incorporated
Linthicum Heights, MD
Full-time
Posted 2 weeks ago Apply on company site
Full-time
Posted 2 weeks ago Apply on company site
More jobs in Linthicum Heights, MD
Full-time
Posted 3 days ago Apply on company site
Full-time
Posted 3 days ago Apply on company site
Full-time
Posted 5 days ago Apply on company site
$135,000 – $157,000 per year · Full-time
Posted 2 weeks ago Apply on company site