ISSM (Engineer Info Assurance 3) - 28660

What you will do

• Provide technical input, recommendations, and assistance with the implementation of both higher and granular-level cyber security approaches, methods and solutions that incorporate and maintain compliance to requirements resulting from laws, regulations and other pertinent guidance.
• Advise the ISO concerning the impact levels for confidentiality, integrity, and availability for the information systems.
• Evaluate threats and vulnerability to information systems to ascertain the need for additional safeguards.
• Review and approve information system security assessment plan, which is comprised of the SSP, the SCTM, and the security control assessment procedures.
• Ensure security assessments are completed for information systems.
• Develop and sustain Risk Management Framework Packages in EMASS, or Xacta or other mandated toolsets.Prepare the final Security Assessment Report (SAR) which includes assessment results and findings, at the conclusion of each security assessment activity. 
• Initiate a POA&M with identified weakness and suspense dates for each information system based on findings and recommendations from the Sar.
• Evaluate security assessment documentation and provide written recommendations for security authorization.
• Develop recommendation for authorization and submit the security authorization package.
• Assess proposed changes to information systems, their environment of operation, and mission needs that could affect system authorization.
• Provide purposeful security architecting, design, development, and configuration of information systems.
• Provide inputs to development teams responsible for designing and developing organizational information systems and upgrading legacy systems.
• Employ best practices when implementing security requirements for information systems including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.