About This Role
This Information System Security Manager role supports Peraton Labs' information assurance and information technology operations. The position involves leading and managing information assurance efforts and systems across various environments, working on-site in Silver Spring, Maryland.
Responsibilities
- Lead and manage information assurance efforts and systems across numerous environments
- Perform Information System Security Manager (ISSM) roles and responsibilities as prescribed by DAAG, JSIG, ICD-503, and other applicable regulations
- Create, manage, and maintain RMF Package documentation, submissions, and associated artifacts, including A&A packages, ASA packages, and SCRs
- Prepare, deliver, and update all required documentation using current approved templates, forms, regulations, and methods
- Meet continuous monitoring requirements for accredited information systems, including weekly auditing, performing backups, AV updates, OS patching, and vulnerability scanning
- Manage security vulnerabilities, implement timely remediation, monitor security logs for violations and anomalous events, and report information security concerns and problems
- Generate Plan of Actions & Milestones (POA&Ms) for each non-compliant control and manage all applicable POA&Ms throughout the information system lifecycle
- Oversee the management and maintenance of Linux and Microsoft classified information systems, with the ability to assist in technical efforts when needed
- Apply security controls based on the DoD Security Technical Implementation Guidance and other customer requirements
- Work closely with key stakeholders to identify any additional controls applicable to the system(s) to maintain a favorable security posture
- Assist in incident response, annual self-inspection, and inventory efforts
- Track the deployment of all applicable software and hardware to classified environments
- Provide, track, and report security requirements throughout the system life cycle of all information systems within the accreditation boundary
- Provide timely and detailed responses to user and customer requests
- Continuously maintain a thorough understanding of all relevant corporate policies, security control plans, system configurations, architecture, installed software, accounts (Operating System and Application), data flows, ports, protocols, and other relevant data for each Information System
- Maintain required certifications for this role
- Ensure Configuration Control Board system reviews are scheduled and issues/updates communicated to the Information System Owner
- Ensure cybersecurity self-inspections are conducted annually
Requirements
- Minimum of 8 years of experience with a BS/BA or 6 years with an MS/MA (an additional 4 years of experience may be considered in lieu of a degree)
