Assistant ISSO/RMF Cybersecurity Analyst

THOR Solutions is actively seeking an Assistant ISSO/RMF Cybersecurity Analyst to support a USCG information technology support services program focused on cloud data management, cybersecurity assessment and authorization (A&A), and governance in Suitland, MD.

This position serves as an Assistant Information System Security Officer (A-ISSO), supporting the Risk Management Framework (RMF) process across assigned systems and enclaves to ensure the confidentiality, integrity, and availability of information systems to support the customer's compliance with applicable DHS, federal, and industry cybersecurity requirements and standards.

Typical Responsibilities:

- Serve as an Assistant Information System Security Officer (A-ISSO), participating in the Risk Management Framework (RMF) process for assigned programs, organizations, systems, or enclaves.
- Gather or generate, assess, and maintain RMF documentation packages tailored to specific systems, including Security Categorization Determinations, Implementation Plans, System Security Plans (SSP), Configuration Management Plans (CMP), Incident Response Plans (IRP), Contingency Plans (CP), authorization documentation, POA&Ms, Scorecards, Security Assessment Reports (SAR), Continuous Monitoring Strategies, Vulnerability Scans, Hardware/Software lists, Threat Models, Cybersecurity Strategies, Network Topology, boundary diagrams, and data flow diagrams.
- Ensure all information system cybersecurity documentation is current and accessible to properly authorized individuals.
- Interpret system designs and diagrams to identify data interconnections, interfaces, protocols, and data types, and select appropriate controls to remediate or minimize cybersecurity risk exposure.
- Develop plans and perform testing and control assessments to evaluate compliance with applicable security requirements, standards, and best practices.
- Conduct STIG/SRG assessments and Security Readiness Reviews (SRR) for operating systems and applications, leveraging automation to gain efficiencies.
- Conduct and review system scans using automated compliance assessment tools and provide documented results to appropriate stakeholders.
- Develop and conduct detailed security assessment briefs and provide cybersecurity risk recommendations to authorizing officials.
- Assist ISSOs and Information System Owners with security control implementation, policy development, and Standard Operating Procedures required for accreditation.

Location:  Full-time onsite at USCG ICC in Suitland, MD.

Typical Physical Activity: Desk/computer work in an office environment. May involve: repetitive motion.

Typical Pay Range: The anticipated pay range for this position in the identified location(s) is $82,000 – 112,000. Actual compensation offered will be based upon individual factors including education, qualifications, and experience.

Existing TOP SECRET/SCI Security Clearance Required: This position requires an existing active TS/SCI security clearance prior to hire. Only U.S. citizens are eligible for a security clearance; therefore, only current U.S. citizens will be considered for this position.

Required Knowledge, Skills, and Abilities:   
- Bachelors degree in data science, information systems, computer science, or a related discipline.
- At least five (5) years of Information Assurance and A&A experience, including assessment of information system vulnerabilities and participation in the RMF process. Experience developing and maintaining RMF/authorization documentation packages, conducting security control assessments, and supporting continuous monitoring.
- Must possess active/current certifications to qualify as both DoD 8570/8140 IAT Level 2 and IAM Level 2. DoD 8570/8140 IAT Level 2 (required for systems assessment and authorization work), fulfilled by possessing ONE of the following: CompTIA Cybersecurity Analyst (CySA+)
- CompTIA Security+ CE (Sec+ CE)
- EC-Council Certified Network Defense (CND) v3
- Red Hat Certified System Administrator (RHCSA)
- CCNA Security
- Global Industrial Cyber Security Professional (GICSP)
- GIAC Security Essentials (GSEC)
- Systems Security Certified Practitioner (SSCP)
- CompTIA Advanced Security Practitioner (CASP)
- Cisco Certified Network Prof. Security (CCNP Security)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- GIAC Certified Enterprise Defender (GCED)
- GIAC Certified Incident Handler (GCIH)

- DoD 8570/8140 IAM Level 2 (required for IA program support work), fulfilled by possessing ONE of the following: CompTIA Advanced Security Practitioner (CASP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Security Professional (CISSP)
- Certified Chief Information Security Officer (C-CISO)
- HealthCare Info. Security and Privacy Practitioner (HCISPP)
- Red Hat Certified System Administrator (RHCSA)
- Certified Authorization Professional (CAP)
- GIAC Security Leadership (GSLC)
- Certified Information Security Manager (CISM)
- Certified Chief Information Security Officer (C-CISO)
- GIAC Security Leadership (GSLC)

- Proficiency in Microsoft Office suite and SharePoint.
- Knowledge of data governance and data framework compliance.
- Strong organizational and communication skills.

Benefit Offerings: Along with competitive pay, THOR offers a comprehensive benefits package including:

- Paid Time Off (accrued)

- Paid Holidays

- 401(k) with employer match and Traditional/Roth options

- Medical Insurance (3 plan options)

- TRICARE Supplemental Coverage for TRICARE-eligible individuals

- Dental Insurance (2 plan options)

- Vision Insurance Plan (2 plan options)

- Healthcare and Dependent Care Flexible Spending Accounts (FSAs)

- Commuter/Transit Benefits

- Basic Life/AD&D Insurance for employee

- Additional Life Insurance options for employee + family

- Short-Term and Long-Term Disability Insurance

- Pet Benefits

- Legal Plan

- ID Theft Protection Plan

- Employee Assistant Plan and Work-Life Program

- Voluntary Leave Transfer Program

- Tuition Reimbursement Program

- Employee Referral Program

Please be aware that many of our positions require an existing security clearance or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants to cleared positions who lack clearance eligibility will not be considered.

Founded in 2009, THOR Solutions, LLC (THOR) is a rapidly growing Center for Veteran’s Excellence (CVE) verified Service-Disabled Veteran-Owned Small Business (SDVOSB) providing mission critical support across the Department of Defense, Department of Homeland Security, federal civilian agencies and commercial maritime industry, worldwide. THOR provides innovative and tailored expertise in multidisciplinary engineering, project and program management, business and financial management, technical support, integrated logistics support, training support, fleet support, corporate operations support, assessments and studies. THOR is privileged to deliver service solutions to the nation’s most complex military, public sector and industry challenges.

THOR is proud to be an Equal Opportunity Employer, including veterans and individuals with disabilities . THOR considers all qualified applicants for employment without regard to legally protected characteristics. This policy applies to all terms and conditions of employment.

If you are an individual with a disability and would like to request a reasonable accommodation as part the employment selection process, please contact us at [email protected] or (571) 215-0077.