This job has expired

Information Assurance Officer

Employer
Chenega MIOS
Location
Alexandria, Virginia
Closing date
Oct 5, 2023

View more

Job Details

Summary

Information Assurance Officer

Alexandria, VA

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

Chenega IT Enterprise Services (CITES) offers forward-thinking technology solutions to federal agencies and the DoD. Formed in 2016 to serve federal customers CONUS, CITES has grown quickly into a best practices leader for the modern federal enterprise.

The Information Assurance Officer (IA Officer/ISSO) supports the AGC Information System Security Manager (ISSM) with Assessment and Authorization and Access Only activities in accordance with DoDI 8510.01 and NETCOM Tactics, Techniques, and Procedures (TTP) for Risk Management Framework (RMF) processes. The Information Assurance Officer (IA Officer/ISSO) collaborates closely with the cross-functional team comprised of cybersecurity, system administrators, and desktop support to perform and report on continuous monitoring, vulnerability management scanning, patching, analysis; review, maintenance, and update eMASS records for document updates, security controls, POAM milestones, and compliance, ensure application of DISA quarterly STIG releases and STIG results analysis.

Responsibilities
  • Report on and perform continuous monitoring on all AGC-supported systems and networks; identify, mitigate, and resolve cyber security incident issues and concerns
  • Develop guidelines, plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cybersecurity-related activities and mandates
  • Respond to all cyber security notices as directed by the Cyber Security Service Provider (CSSP) and pertinent service providers, take action to comply with security notices, and record compliance
  • Provide technical support, including documentation, to enable required AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF)
  • Support operational cybersecurity activities, including vulnerability scanning, IAVM compliance, STIG and SRG application, assessment, and remediation, and POA&Ms
  • Support cybersecurity governance, risk, and compliance by providing plans, policies, and procedures relevant to AGC's systems, applications, and networks, including AGC GovCloud (L2), and other accredited systems and applications
  • Maintain AGC's Tenant Security Plans (TSP) for SIPR and NIPR, Authority to Operate (ATO) for JWICS and Interim Authority to Test (IATT), Approval to Connect (ATC), and any other documentation necessary to support AGC's network connections and mission systems
  • Manage the eMASS records for AGC's mission systems and enclaves, create and track POA&Ms, track IAVM and STIG compliance, and manage eMASS artifacts necessary to support evidence for applicable security controls
  • Support RMF activities, including categorization of systems IAW NIST SP 800-60, selection of security controls IAW CNSSI 1253 and NIST SP 800-53, assessment of security controls IAW NIST SP 800-53A, development and implementation of Continuous Monitoring Plans IAW NIST SP800-137, STIG Traceability Matrix, hardware/software/firmware list, and System Security Plan (SSP)
  • Participate in the configuration process through representation on the Technical Review Board (TRB) and Configuration Control Board (CCB) and provide a security impact assessment for changes submitted through Request for Change (RFCs)
  • Responsible for the reporting and analysis of continuous monitoring of AGC's systems, applications, and networks
  • Configure vulnerability scanning, analyze results, and close or mitigate findings
  • Organize the assessment of AGC GISO IT assets using applicable STIGs, SRGs, and/or vendor supply hardening guidelines.
  • Responsible for configuring AGC GISO IT assets for vulnerability scanning and ensuring 100% coverage using credentialed scans
  • Coordinate with RNEC-NCR, C5ISR, and GISA as necessary to ensure vulnerability assessment tools are in place and working properly
  • Analyze vulnerability scan results and resolve open findings; for findings that cannot be closed, create a POA&M, and recommend mitigation(s) to lessen the impact of the vulnerability; submit Operational Impact Statements (OIS) for Critical and High IAVAs.
  • Support response procedures for cybersecurity incidents, like breaches, spillage, and insider threat actions
  • Maintain all cybersecurity documentation required for accreditation for AGC's GISO assets, including but not limited to architecture diagrams, boundary diagrams, data flow diagrams, ports, protocols, services exception requests, PKI certifications, IA metrics, and Privacy Impact Assessments (PIA) in the requisite cybersecurity document repository and eMASS
  • Provide input to the weekly and monthly status report covering technical activities for this functional area, including priorities, tasks, accreditation due dates and schedules, POAM status, metrics, continuous monitoring tasks, et al.
  • Other duties as assigned

Qualifications
  • High school diploma or GED equivalent required
  • Bachelor's or associate degree preferred; relevant experience and certification can be substituted with a degree
  • 5+ years of relevant experience with DoD in IA/Cybersecurity role
  • DoD 8570 IAM II certification required
  • DoD 8570 IAM III certification preferred
  • Active TS/SCI clearance required

Knowledge, Skills, and Abilities:
  • Trained and experienced with DoD vulnerability scanning tools, including:
  • Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol Compliance Checker (SCAP), Security Technical Implementation Guide (STIG) Viewer, Endpoint Security Solution (ESS), and AWS GovCloud security tools, including AWS Security Hub, Amazon Inspector, AWS Config, Amazon GuardDuty, Amazon Detective, and Amazon Macie.
  • Possess knowledge and experience with:
  • Application and system assessment, determination of accreditation requirements (Assess Only, ATO, IATT, etc.).
  • Categorization of information systems and/or data types IAW NIST SP 800-60 Vol II
  • Establishment of Security Requirements Traceability Matrix which identifies applicable DISA STIGs and SRGs
  • Selection of security controls per NIST SP 800-53 and CNSSI 1253
  • Writing System Security Plan (SSP), associated security controls assessment artifacts, and PO&AMs
  • Application of DISA STIGs and SRGs
  • Management of security controls assessment artifacts in eMASS in preparation of packages for RMF (DoDI 8510.01, NIST SP 800-37) processes.
  • Evaluation of security controls per NIST SP 800-53A
  • Implementation of continuous monitoring solutions per NIST SP 800-137
  • Knowledge and experience with current DoD and Army IA policies and procedures, RMF certification and accreditation procedures and requirements, and APMS reporting procedures and an understanding of the unique acquisition community IA issues
  • Able to lead/oversee Program Protection Planning (PPP) and Security Classification Guide development and production for developmental and production systems
  • Knowledge and experience in the security sub-disciplines supporting Army IA, certification and accreditation, IA security testing, and security management for both developmental and production systems, including but not limited to Communications Security, Physical Security, OPSEC, Risk Assessments, Personnel Security, Tempest, Network Security, Security Inspections, and User Training
  • Must have advanced working knowledge of a variety of computer software applications in word processing, spreadsheets, database (MSWord, Excel, Access, PowerPoint), and Outlook.
  • Familiarity with Army and DoD regulations concerning IA implementation

How you'll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOS's culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenega's impact on the world.

Chenega MIOS News- https://chenegamios.com/news/

Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - www.chenegamios.com

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm

LinkedIn - https://www.linkedin.com/company/1472684/

Facebook - https://www.facebook.com/chenegamios/

#Chenega IT Enterprise Services, LLC

Chenega Corporation and family of companies is an EOE.

Equal Opportunity Employer/Veterans/Disabled

Native preference under PL 93-638.

We participate in the E-Verify Employment Verification Program

Company

Chenega Corporation’s Military, Intelligence, and Operations Support (MIOS) Strategic Business Unit (SBU) provides innovative solutions for federal, DOD, and commercial customers worldwide. Founded in 2005 and headquartered in Lorton, Virginia, Chenega MIOS is a shared services division of Chenega Corporation. As an Alaska Native Corporation, 100% of our profits benefit our Native shareholders through preservation of culture and heritage or being reinvested in the business, truly making Chenega a “Corporation with a higher cause.” 

Chenega MIOS provides standard business services to its 20+ wholly-owned companies of Chenega Corporation and assists in managing contracts with a net value of over $600 million. Together, the companies aligned under the MIOS SBU offer a diverse range of capabilities that strengthen our capacity for shared knowledge and mission-focused service to our customers. These capabilities include but are not limited to information technology, systems engineering, records management, and staff services. 

As a 2020 Top Workplace, we are proud to be a Washington Post featured employer and are always looking for dedicated professionals in the DC Metro region. Still, our footprint reaches across the globe with work in 39 states, DC, Guam, and 11 different countries. Please find our DC Metro area positions below, and for more information on Chenega MIOS, our capabilities, and employment opportunities, please visit chenegamios.com.

Socials Linkedin | Facebook | Glassdoor

Get job alerts

Create a job alert and receive personalized job recommendations straight to your inbox.

Create alert