Vulnerability Management Lead, Information System Security Officer Job at KAIROS Inc (Lexington Park)

Job Description

Vulnerability Management Lead, Information System Security Officer (ISSO) will support the Unmanned Carrier Aviation Program Office (PMA-268) at Patuxent River Naval Air Station in Lexington Park, MD. PMA 268 is responsible for the MQ-25 Stingray unmanned air system.

Job Responsibility

Assess and validate PMA-268 RMF packages (Authorizations to Operate (ATOs) and Interim Authorizations to Test (IATTs)
Coordinate development of the Security Assessment Plan (SAP) with Integrated Product Team (IPT) SSE and system ISSO
Submit SAP for approval
Execute the SAP
Provide a summary of failed controls in Enterprise Mission Assurance Support Service (eMASS) (Risk Assessment)
Complete the Security Assessment Report (SAR)
Provide POA&M update recommendations to the PMA/IPT based on assessment results
Ensure traceability of all vulnerabilities from raw assessment results to the POA&M
Support Continuous Monitoring (ConMon) activities (e.g. annual security reviews, system/changes/ Memorandums for the Record (MFRs))
Create consolidated list of mitigation statements for POA&Ms (unclassified) to assist ISSOs with established mitigation statements for common non-compliant security controls
Establish and execute a PMA-268 vulnerability management program, to include developing guidance for VRAM record creation and management
Develop a PMA Vulnerability and Patch Management Policy
Coordinate development of System level Vulnerability and Patch Management Plans (VPMP)
NAVAIR Rapid Response Lead for PMA-268
Attend Rapid Response meetings
Coordinate consolidated PMA-268 responses to Orders received (i.e. EXORD, OPORD, TASKORD)
Monitor the NAVAIR Vulnerability Management Channel for notifications daily
Maintain the PMA-268 Cyber Directive Status tracker
Create and maintain a Cyber Directives tracker on SIPR summarizing the orders
Manage PMA-268 Portfolio VRAM records
Support PMA-268 Cyber Lead in execution of the PMA-268 Cybersecurity Program
Provide assistance and guidance to PMA-268 ISSOs
Update and sustain PMA-268 RMF Training Slides
Assist in the development of eMASS Common Control Packages (CCPs)
Develop RMF security control family templates
Develop PMA Incident Response Plan
Coordinate and provide oversight for all MOU/ISA efforts required in support of cyber authorizations or system use

Requirements

Strong customer relations, analytics, documentation skills
Self-starter, highly motivated, strong work ethic with a commitment to quality
Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
Ability to work within a challenging, fast-paced, team-oriented environment
Ability to work independently
Ability to multi-task and meet competing, deliverable deadlines
Detail oriented
Excellent interpersonal and customer service skills
Excellent verbal and written communication skills to provide clear status and/or communicate issues
Ability to adapt to evolving technology
Demonstrated experience in an area of engineering expertise is required
Bachelor’s degree in technical or scientific field from an accredited college or university
Three (3) years of recent and relevant experience
This position requires an Active Secret Security Clearance
U.S. Citizen

What we offer

Medical Coverage
Employer Paid Dental, Vision, Basic Life/AD&D, Short-Term/Long-Term Insurance
Health Savings Account with Contribution by Employer
401K Plan with Employer Matching
Annual Discretionary Bonuses
Paid Time Off
Eleven (11) Paid Holidays
Certification reimbursement program
Tuition Reimbursement Program
Paid Parental Leave
Employee Assistance Program (EAP)
Rewards and recognition programs
Community outreach events through our KAIROS Kares group

KAIROS Inc - All Job Offers

Select Country

Vulnerability Management Lead, Information System Security Officer

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Vulnerability Management Lead, Information System Security Officer

SCIF Manager / Information System Security Officer

Lead Information Systems Security Officer (ISSO)

System Engineer - Information Systems Security Officer

Information System Security Engineer - Senior

Chief Information Security Officer

Information Security Officer

Chief Information Security Officer

Information Systems Security Officer

Our AI answers in your language