About the job
Requisition #: 1400
Job Title: Information Systems Security Officer (ISSO)
Location: Ridgecrest, CA (China Lake)
Clearance Level: Interim Secret
Required Certification(s): IAM III certification (CCISO, CISM, CISSP, GSLC, Sec+)
SUMMARY
The Naval Air Warfare Center Weapons Division (NAWCWD) is at the forefront of research, development, acquisition, and test & evaluation of advanced Naval weapon systems. Our mission encompasses the integration of air-to-air, air-to-ground, and surface-launched weapon systems, alongside conducting comprehensive lifecycle cost analyses and providing essential armament lifecycle services to support the operational forces within the Department of Defense (DoD) and the Missile Defense Agency (MDA).
As part of the Naval Air Systems Command (NAVAIR) and the NAWCWD, the Digital Information Technology Analysis and Cyber (DITAC) Department is dedicated to delivering top-tier Cyber Security Support Services (CSSS). Our focus is on sustaining the analysis, design, development, test, integration, deployment, and operation of Information Technology (IT) systems and services, ensuring comprehensive certification and accreditation services, effective configuration management, and robust network monitoring and defense mechanisms to fortify our Cyber Security workforce.
JOB DUTIES AND RESPONSIBILITIES
- Strategically planning, implementing, upgrading, and monitoring security measures to safeguard computer networks and sensitive information.
- Demonstrating a strong command of the Risk Management Framework (RMF) process and proficiency with tools such as eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications.
- Executing all RMF process steps in alignment with Navy and NAVAIR directives.
- Managing security package submissions in eMASS.
- Actively reviewing Nessus scans and managing Authority to Operate (ATO) packages.
- Maintaining comprehensive hardware and software inventories.
- Ensuring thorough review and verification of Security Technical Implementation Guides (STIGs).
- Collaborating effectively with System Administrators and Network Operations teams to identify and address system vulnerabilities and track the implementation of security measures.
- Conducting rigorous security control assessments and validations of both technical and non-technical security features to effectively mitigate known threats and vulnerabilities, taking into account existing risk mitigation strategies.
- Ensuring timely completion of all necessary RMF products and reporting in compliance with policy and in collaboration with the Security Control Assessor.
- Assisting in the ongoing update of documentation related to risk assessments, including Risk Assessment Reports and Plans of Action & Milestones (POA&M).