Assistant ISSO/RMF Cybersecurity Analyst

The Assistant ISSO/RMF Cybersecurity Analyst will support a USCG information technology support services program in Suitland, MD. In this role, you will serve as an Assistant Information System Security Officer (A-ISSO), assisting assigned systems and enclaves through the Risk Management Framework (RMF) and cybersecurity assessment and authorization (A&A) activities.

Role Overview

This position supports RMF execution for assigned programs, organizations, systems, or enclaves. The role includes maintaining RMF documentation packages, supporting security assessments and testing, and assisting with control implementation activities required for accreditation.

Responsibilities

• Serve as an Assistant Information System Security Officer (A-ISSO) and participate in the RMF process for assigned programs, organizations, systems, or enclaves.
• Gather or generate, assess, and maintain RMF documentation packages tailored to specific systems, including Security Categorization Determinations, Implementation Plans, System Security Plans (SSP), Configuration Management Plans (CMP), Incident Response Plans (IRP), Contingency Plans (CP), authorization documentation, POA&M, Scorecards, Security Assessment Reports (SAR), Continuous Monitoring Strategies, vulnerability scans, hardware/software lists, threat models, cybersecurity strategies, and net (as applicable per assigned package scope).
• Ensure system cybersecurity documentation is current and accessible to properly authorized individuals.
• Interpret system designs and diagrams to identify data interconnections, interfaces, protocols, and data types, then select appropriate controls to remediate or minimize cybersecurity risk exposure.
• Develop plans and perform testing and control assessments to evaluate compliance with applicable security requirements, standards, and best practices.
• Conduct STIG/SRG assessments and Security Readiness Reviews (SRR) for operating systems and applications, leveraging automation to improve efficiency.
• Conduct and review system scans using automated compliance assessment tools and provide documented results to appropriate stakeholders.
• Develop and conduct detailed security assessment briefs and provide cybersecurity risk recommendations to authorizing officials.
• Assist ISSOs and Information System Owners with security control implementation, policy development, and Standard Operating Procedures required for accreditation.

Required Qualifications

• Bachelor's degree in data science, information systems, computer science, or a related discipline.
• At least five (5) years of Information Assurance and A&A experience, including assessment of information system vulnerabilities and participation in the RMF process.
• Experience developing and maintaining RMF/authorization documentation packages, conducting security control assessments, and supporting continuous monitoring.
• Active/current certifications to qualify as both DoD 8570/8140 IAT Level 2 and IAM Level 2.
• DoD 8570/8140 IAT Level 2 certification, fulfilled by one of the following options: CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE (Sec+ CE), EC-Council Certified Network Defense (CND) v3, Red Hat Certified System Administrator (RHCSA), CCNA Security, Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), CompTIA Advanced Security Practitioner (CASP), Cisco Certified Network Prof. Security (CCNP Security), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), GIAC Certified Enterprise Defender (GCED), or GIAC Certified Incident Handler (GCIH).
• DoD 8570/8140 IAM Level 2 certification, fulfilled by one of the following options: CompTIA Advanced Security Practitioner (CASP), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (C-CISO), HealthCare Info. Security and Privacy Practitioner (HCISPP), Red Hat Certified System Administrator (RHCSA), Certified Authorization Professional (CAP), or GIAC Security Leadership (GSLC).
• Proficiency in Microsoft Office suite and SharePoint.
• Knowledge of data governance and data framework compliance.
• Strong organizational and communication skills.

Technologies and Skills

• Microsoft Office suite, SharePoint
• STIG/SRG, RMF
• DHS, DoD 8570/8140
• IAT Level 2, IAM Level 2
• CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE (Sec+ CE)
• EC-Council Certified Network Defense (CND) v3
• Red Hat Certified System Administrator (RHCSA)
• CCNA Security, Global Industrial Cyber Security Professional (GICSP)
• GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP)
• CompTIA Advanced Security Practitioner (CASP), Cisco Certified Network Prof. Security (CCNP Security)
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH)
• Certified Information Security Manager (CISM), Certified Chief Information Security Officer (C-CISO)
• HealthCare Info. Security and Privacy Practitioner (HCISPP)
• Certified Authorization Professional (CAP), GIAC Security Leadership (GSLC)

Clearance and Eligibility

• This position requires an existing active TS/SCI security clearance prior to hire.
• Only U.S. citizens are eligible for a security clearance; therefore, only current U.S. citizens will be considered for this position.

Work Location and Schedule

• Full-time onsite at USCG ICC in Suitland, MD.

Compensation

• USD 82,000 - 112,000 per yearly
• Anticipated pay range for the identified location(s) is $82,000 – 112,000.

Benefits

• Paid Time Off (accrued)
• Paid Holidays
• 401(k) with employer match and Traditional/Roth options
• Medical Insurance (3 plan options)
• TRICARE Supplemental Coverage for TRICARE-eligible individuals
• Dental Insurance (2 plan options)
• Vision Insurance Plan (2 plan options)
• Healthcare and Dependent Care Flexible Spending Accounts (FSAs)
• Commuter/Transit Benefits
• Basic Life/AD&D Insurance for employee
• Additional Life Insurance options for employee + family
• Short-Term and Long-Term Disability Insurance
• Pet Benefits
• Legal Plan
• ID Theft Protection Plan
• Employee Assistant Plan and Work-Life Program
• Voluntary Leave Transfer Program
• Tuition Reimbursement Program
• Employee Referral Program

Typical Physical Activity

• Desk/computer work in an office environment.
• May involve: repetitive motion.