Information Systems Security Officer / RMF

We are seeking an experienced Information Systems Security Officer (ISSO), with government agency experience, to oversee the Risk Management Framework (RMF) process for a growing project. This role resides in our Software Development Department and reports to our Project Manager. The role is remote with a 10% travel requirement.

As the project’s ISSO, you will assist with all areas of information security, such as establishing local security policies and attaining accreditations. You will have a firm understanding of the RMF process and procedures to obtain an Authority to Operate (ATO). You will be responsible for installing, using, and maintaining security management software as well as reports that will be produced. You will have excellent analytical, organizational, time-management and communication abilities. You’ll be expected to collaborate and effectively communicate with all team members to include Government leadership.

SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. Our highly skilled operators conduct research and assessments based on real-world threats. We simulate adversaries and malicious actors to report details and actionable findings on critical assets and infrastructures. Our program planners advise mission owners to bring rapid solutions to intelligence mission leaders. Using innovative processes, tools, and techniques, we predict and overcome cybersecurity vulnerabilities. Our successes are supported by our diverse team of experienced, technical talent. SIXGEN, Inc. is an Equal Opportunity/Veterans/Disabled Employer.

Core Responsibilities:

• Utilize Enterprise Mission Assurance Support Service (eMASS) experience to assess and manage compliance with regulatory requirements and industry standards.
• Apply RMF experience to identify, analyze, and mitigate security risks, threats, and vulnerabilities across networks, systems, and applications.
• Overall management of the RMF body of evidence and eMASS record to include creating and implementing Plan of Action and Milestone (POA&M).
• Develop, test, and operate firewalls, intrusion detection systems (IDS), enterprise anti-virus systems, and software deployment tools to enhance the organization’s security posture.
• Test and debug programs and scripts, and provide instructions for use during network exploitation activities.
• Apply knowledge of current Information Assurance (IA) policies, tactics, techniques, and doctrine to ensure compliance and effectively report security incidents.
• Assist in the planning and implementation of security requirements, ensuring alignment with organizational objectives and standards.
• Evaluate existing and proposed architectures for security design flaws and recommend improvements or modifications to enhance security. 

Required Skills and Experience:

• Bachelor’s degree of science in Computer Science or related field.
  A MS degree in related field may be substituted for 1 year experience.
  A PhD in a related field may be substituted for 2 years experience.
• Minimum 8 years experience, of which at least 5 years must be specialized experience including cybersecurity analyst and implementation of cybersecurity technical controls.
• DoDI 8570 baseline certification IAM Level II qualified.
• Strong experience with eMASS.
• Demonstrated ability to identify security risks, threats, and vulnerabilities, and implement appropriate security controls.
• Proficient in reviewing Nessus/ACAS vulnerability scans and actioning tasks based on results.
• Proficient with POA&M management.
• Familiarity with DISA STIG/SRGs
• Familiarity with IA policy, tactics, techniques, and reporting requirements
• Exceptional organization and time management abilities

Additional Details

• Job Location: Remote (Maryland/Northern VA preferred) 
• Clearance Requirement: TS
• Travel: Yes. Travel to the office will be required for meetings and collaboration. Estimated 10%.

Compensation & Benefits

• Competitive salary
• Employer-paid health insurance premiums (medical, dental, vision)
• Employer-paid short/long term disability insurance and basic life/AD&D insurance
• 401K with a 4% employer contribution
• Professional development reimbursement options available (training, certification, education, etc)​
• Flexible and remote work policies for most positions
• Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually
• 11 paid holidays per calendar year​

We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.

SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.