ATO ISSO at SAIC

Pearl City, Hawaii, United States -

Full Time

Start Date

Immediate

Expiry Date

01 Jan, 26

Salary

0.0

Posted On

03 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Controls, Authority To Operate, Vulnerability Assessment, Risk Assessment, Information Security, System Security Plan, NIST SP 800-53A, Government Risk Compliance, Cloud Environments, Standard Operating Procedures, Risk Management Framework, Cloud Security Requirements, Data Flow Diagrams, System Specifications, Technical Evaluation, Accreditation Packages

Industry

Defense and Space Manufacturing

Description

SAIC has an opportunity for an ATO ISSO in Pearl City, Hawaii OR Huntsville, AL to support the US INDOPACOM J73 documenting security controls and creating Authority to Operate (ATO) packages. NOTE: This position can be located in Pearl Harbor, Hawaii or Huntsville, Alabama. If located in Huntsville, travel is required to Hawaii ~4-6 weeks a year. JOB DESCRIPTION: Documenting security controls in SSP per NIST SP 800-53A rev4 Create Authority to Operate (ATO) packages Validate vulnerability/risk assessment analysis to support accreditation Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation Review completion and implementation of system additions and enhancements, and makes recommendations to management Determine system specifications, input/output processes, and working parameters for hardware and software compatibility Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance REQUIRED EDUCATION AND EXPERIENCE: Bachelors and five (5)+ years of related experience; additional four (4) years of experience accepted in lieu of degree Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments Experience using Government, Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, etc.) Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented Familiar with Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG) Understanding of the DOD requirements for the Network Topology, System Security Boundary, and Data Flow Diagrams REQUIRED CERTIFICATION: Must have a current DoD IAM Level I or higher certification (i.e. Security+ CE, Cloud+, CASP+, OR CISSP etc.) REQUIRED CLEARANCE: Must have a current Active Secret Clearance with the ability to obtain a Top Secret Clearance Must be a current US Citizen

Responsibilities

The ATO ISSO will document security controls and create Authority to Operate (ATO) packages for the US INDOPACOM J73. Responsibilities include validating risk assessments, conducting technical evaluations, and reviewing system enhancements.