ISSO Specialist

Aquila Technology

ISSO Specialist

Lexington, MA +1 location
Full Time
Paid
  • Responsibilities

    ISSO Specialist

    Clearance: Top Secret with SCI Eligibility

    At Aquila Technology, you will see our team’s passion every day, whether we are building a robust, policy-compliant IT system or stress-testing a system to identify gaps and security vulnerabilities. To own the advantage, we ensure our team owns results and gets the work done right the first time by deploying smart, purposeful solutions that work. Aquila is the right people with the right skills driving the right outcomes. We call this the Aquila Advantage.

    About the Role:

    Aquila is seeking an ISSO Specialist to join our team in supporting one of the country’s premier defense research organizations.

    There are a few requirements for the position:

    • Must be a U.S Citizen (Green Cards / Visas do not qualify)
    • Willingness to undergo a comprehensive background investigation and maintain a personal security clearance. (Aquila would sponsor you for the security clearance.)
    • Must be within commutable distance of Colorado Springs, Colorado.

    What You'll Do:

     

    Develops and maintains an IS security program and policies for an assigned area of responsibility. Develops and oversees operational IS security implementation policy and guidelines. Monitors all available resources that provide warnings of system vulnerabilities or ongoing attacks. Monitors system recovery processes to ensure security features and procedures are properly restored and functioning correctly. Responsible for security assessments, tests, and reviews; ensuring proper measures are taken when an IS incident or vulnerability affecting classified systems or information is discovered. Ensures the application of configuration management policies and procedures for authorizing the use of hardware/software are followed. Ensures systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the SSP. Develops and updates the SSP, manages and controls changes to the system, and assesses the security impact of those changes. Ensures user activity monitoring data is analyzed, stored, and protected in accordance with the ITPSO policies and procedures.Develops and maintains POA&Ms in order to identify IS weaknesses, resources and timelines for corrective actions, and mitigate actions. Ensures all users have the requisite security clearances and authorization and are aware of their security responsibilities.

    Responsibilities:

    •  Assist and Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
    • Continuously validate the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
    • Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
    • Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.
    • Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
    • Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.
    • Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to key stake holders. Recognize a possible security violation and take appropriate action to report the incident, as required.
    • Assist the Program Managers and the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy.
    • Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures.
    • Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
    • Lead and align information technology (IT) security priorities with the security strategy.
    • Prepare for and participate in periodic organization compliance assessments. Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.

     

    Must Have:

    • 15 years System Auditing
    • Current DoD 8570 IAT Level II Certification (GSEC, Security+ CE, SSCP, CCNA-Security)YesExperience
    • Currently holds a Top Secret Clearance
    • 15 years Regulatory & Compliance
    • 8 years STIGs/SCAP
    • 8 years Assessing Security Controls (CS105.16)
    • 8 years Assessment and Authorization
    • 8 years Authorizing Systems (CS106.16)
    • 4 years Categorization of the System (CS102.16)
    • 4 years Continuous Monitoring (CS200.16)
    • 4 years HBSS
    • 4 years Implementation of Controls (CS104.16)
    • 4 years Monitoring Security Controls (CS107.16)
    • 4 years NIST 800-171
    • 4 years NIST 800-53
    • 4 years NIST SP 800-37
    • 4 years Risk Management Framework (RMF)
    • 4 years Selecting Security Controls (CS103.16)

    Education and Certifications:

    • A BS degree is preferred but not required
    • Security Plus is the minimum 8570 certification requirement

    Our interview process is designed to let you get to know us as much as for us to get to know you!

    1. You’ll meet with someone from our Recruiting team so we can learn more about you and answer some of your questions.
    2. You’ll meet with the Hiring Manager to learn more about the team, and the role, and get to tell us more about what you’d bring to the team
    3. You’ll meet team members who will be your peers to help you get a feel for a “real day in the life” at Self.

    Benefits and Perks:

    Aquila team members experience the opportunity to be part of a fast-paced, customer-focused, and technically innovative work environment. Aquila strives to deliver the best of the best in technical services to our customers. Candidates that possess a love for technical challenges, a desire to constantly learn, and the desire to establish themselves as critical players within a team will enjoy calling Aquila Technology home.

    Our Perks Include:

    • PTO - 15 days (vacation/sick) 10 paid holidays - 6 standard (New Year’s, Memorial Day, Independence Day, Labor Day, Thanksgiving, and Christmas) - 4 floating holidays prorated based on your day of hire
    • 1.5 paid days, or 12 hours, for approved volunteer work
    • 1 week of paid maternity/paternity LOA after 1 year of Full-time employment
    • Tuition & Training Reimbursement - 5K annually for pre-approved, job-related tuition, certification, or professional conferences
    • 401K with Fidelity 100% immediate vesting; Plan eligibility begins 90 days following the date of hire. Aquila matches 100% the fist 3%, then 50% on the next 2%. It ends up calculating to be total 4%, company matches when an employee at least contributes at 5%.
    • Cell Phone & Internet Reimbursed up to $150 monthly to cover cell phone, data, and home internet expenses.
    • By Your Own Device (BYOD) Allowance Reimbursed up to $1500 for the purchase of a qualified technology device. Eligible after 90 days of employment, and benefit renews every three years.

     

    Clearance: Candidates must have an active TS clearance with SCI eligibility required. Candidate may be required to pass a CI polygraph.

    Travel: 10% - domestic only

    Work Location: Colorado Springs. Hybrid: This individual should expect to work onsite at least 4 days a week. Final schedule TBD by hiring manager.

    We are an Equal Opportunity Employer.

     

  • Locations
    Manitou Springs, CO • Lexington, MA