Command Post Technologies, Inc. (CPT) is seeking Information Systems Security Officers (ISSOs) and Risk Management Framework (RMF) Analysts for anticipated opportunities supporting the Defense Advanced Research Projects Agency (DARPA) in Arlington, Virginia.
The selected candidate will support cybersecurity governance, information system authorization, security control implementation, and continuous monitoring activities across classified and unclassified environments. This position requires a working understanding of DoD cybersecurity policies, RMF processes, and the documentation necessary to obtain and maintain system Authorizations to Operate (ATOs).
Key Responsibilities
- Support implementation and maintenance of the DoD Risk Management Framework (RMF) across assigned information systems.
- Develop, review, and maintain cybersecurity authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and related security artifacts.
- Assist with system assessment and authorization activities, including security control identification, implementation, assessment, and continuous monitoring.
- Review vulnerability scan results, configuration assessments, and compliance findings to identify and track security risks.
- Support implementation and validation of DISA Security Technical Implementation Guides (STIGs), security baselines, and applicable DoD cybersecurity directives.
- Coordinate with system administrators, engineers, security control assessors, and Government security personnel to address cybersecurity requirements.
- Maintain documentation supporting system interconnections, contingency planning, incident response, and continuous monitoring strategies.
- Track remediation activities and coordinate updates to cybersecurity compliance records.
- Support security audits, inspections, and assessments by preparing documentation and providing technical information.
- Evaluate changes to systems, configurations, and security requirements for potential impacts to authorization and compliance.
