Information System Security Officer

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring for an Information System Security Officer (ISSO) who will provide support to a software development environment. The selected applicant will perform a variety of Information Assurance activities including but not limited to:

• Implementing the security program and policies for assigned Information Systems.

• Maintaining a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.

• Monitoring all available system resources that provide warnings of vulnerabilities or ongoing attacks and report them to the ISSM for Windows Server and VMWare environments.

• Providing inputs to the ISSM to the RMF Body of Evidence artifacts and to facilitate the Security Controls Assessment

• Assisting the ISSM with the creation of the Security Assessment Report.

• Use WSUS, SCCM and SCOM to review, monitor and validate updates to operating systems and applications.

• Provide Plan of Action and Milestones (POA&M) inputs to the ISSM (specifically resources required, scheduled completion date, milestones with completion dates, and milestone changes).

• Execute the Continuous Monitoring Plan and document the results. Provide the results to the ISSM.

• Review/analyze Audit Logs.

• Perform compliance/vulnerability scans (e.g., ACAS, NESSUS, SCAP, STIG checks) to validate that the system has properly updated, and report the results to the ISSM.