Information System Security Officer (ISSO)

About the role

Amentum is seeking an experienced Information System Security Officer (ISSO) in Spokane, WA to support a Department of War (DoW) customer. The ISSO ensures cybersecurity measures are implemented across multiple DoW information systems, leads efforts to establish and maintain Authority to Operate (ATO) approvals for standalone networks, and works with cybersecurity counterparts to maintain ATOs for shared Wide Area Networks (WANs). The position is non-remote, full-time and on-site.

Key responsibilities

• Monitor changes to DoW/DoD cybersecurity policies and update local policies accordingly.
• Review audit logs on standalone and networked systems to identify, investigate and report anomalous activity.
• Manage network account authorization, access requests and user paperwork, enforcing the principle of least privilege.
• Use Tenable Nessus to find vulnerabilities and assess STIG compliance, and work with systems and IT teams to remediate them.
• Deliver cybersecurity and user awareness training, perform annual RMF self-inspections and continuous monitoring assessments.
• Maintain RMF ATO packages and the Plan of Action and Milestones (POA&M).
• Coordinate hardware, software and firmware changes through Configuration Control Boards, and support incident response activities.
• Brief and advise system stakeholders on security matters.

Required profile

• Active Top Secret US Government security clearance with SCI eligibility; US citizenship required to maintain it.
• Current certification meeting DoD 8140 (formerly 8570) for Intermediate ISSM (IAM Level II), such as CISSP, CISM, CCSP, CISSO, SSCP, etc.; a bachelor's degree in IT, cybersecurity, data science, information systems or computer science can also meet the requirement.
• At least 2 years of experience as an ISSO/ISSM, system administrator or equivalent cybersecurity role.
• Direct hands-on experience developing, submitting and processing RMF packages.
• Preferred: 4+ years of ISSO/ISSM experience, an Advanced ISSM (IAM III) certification, and DISA STIG/SRG implementation experience.

Required skills

• Familiarity with Splunk, Tenable Nessus, Change Auditor and Trellix ePolicy Orchestrator (ePO)
• Windows and/or Linux system administration, account management, patching and hardening
• Technical and professional writing; high proficiency with MS Office (Word, Excel, Visio, PowerPoint)

What we offer

• Hiring salary range of $100,000 to $130,000, depending on education, experience and market data.
• Medical, dental, vision and 401k benefits.
• Paid time off accruing weekly at 2.31 hours, based on years of service, and 11 paid holidays.