STIP Information System Security Officer

JRAD is seeking candidates for an immediate-fill STIP Information System Security Officer (ISSO) position supporting the Transportation Security Administration. This position is a remote position however, candidates MUST live within commuting distance of Reagan National Airport (DCA) and the TSA System Integration Facility (TSIF)., The ISSO will provide engineering and cybersecurity support services for engineering analysis, Transportation Security Equipment (TSE) development, configuration control board, technical reviews of deliverables, and other technical documentation (cybersecurity meetings, conferences, and reviews). Provide Cybersecurity subject matter expert (SME) support for vendor coordination of Checkpoint Technologies (systems and equipment) Authorization to Operate (ATO). Provide the TSA’s Checkpoint Technologies Division (CTD) with cybersecurity ISSO support consistent with best practices for system security and threat reduction in accordance with Department of Homeland Security’s 17 Pillars of Cybersecurity Assurance as well as NIST, DOD and other guidance directed by the TSA customer. The ISSO shall make recommendations to improve technical designs and equipment implementations resulting in a robust, sustainable security position of CTD systems., + Ability to apply system engineering approach to develop and document technical requirements and strategies to support acquisition of Checkpoint related equipment and systems.

• Provide SME support for developing cybersecurity related input for Request for Information (RFIs), Statement of Work (SOWs), Statement of Objectives (SOOs), Performance Work Statements (PWSs), Independent Government Cost Estimates (IGCEs), and other activities related to acquisition of material.
• Configuration Control Board (CCB) skills that includes conducting technical reviews of Developmental Engineering Proposals (DEPs) Engineering Change Proposals (ECPs), Request for Deviation (RFDs), and participation in TSA’s CCB process.
• Ability to provide cybersecurity SME support to review technical deliverables that include developing technical specification, requirements management, reviewing key system development and acquisition documents, and other technical/cybersecurity related documents.
• Ability to support meetings, conferences, and other EBSP program reviews. Attend and document minutes at TSE meetings.
• Must have the ability to assist with the development of standard operating procedures.
• Experience with internal and external audits, ensuring compliance with security policies.
• Working knowledge of Cyber Security Assessment and Management (CSAM) tool
• Strong understanding of Vulnerability & Patch management, including vulnerability identification, assessment, and remediation (Tenable Nessus tool).

Candidate must possess the following:

• Minium of a Bachelors degree (Computer Science, Information Science, Engineering, or other related Science or Technology discipline) and 10 years of experience in cyber security / network security (Masters degree and 7 years of experience).
• CISSM is required (desire CISSP)
• Security +
• NIST 800-53
• FISMA Compliance
• Zero Trust
• Must have effective oral and written communication skills and the ability to work closely with senior TSA managers.
• SME level experience with the Risk Management Framework (RMF) and obtaining ATOs for systems with varying levels of complexity.

JRAD is committed to the health and well-being of its employees. We offer more paid time off than the average company upon hire and the following benefits are available to all full-time employees:

• Health Insurance
• Dental Insurance
• Vision Insurance
• Life & Accidental Death and Dismemberment Insurance
• Section 125 Flexible Spending Accounts for unreimbursed medical & dependent day care
• Disability Insurance
• 401K Plan
• Tuition Reimbursement

JRAD is an equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities.

The JRAD salary range for this position is a general guideline only and not a guarantee of compensation or salary. There are many factors considered when determining the compensation provided in an offer. These factors include, but are not limited to position responsibilities, education, experience, knowledge, skills, and contract terms and conditions.