Information System Security Officer

Reference: 85347-369987Readiness Delivered. At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers. Kratos is looking for an ISSO in beautiful Boulder, CO, to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.Primary Responsibilities:Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.Participate in regular security self-inspections and audits.Assist with the selection and implementation of security controls and features for systems and applications.Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.Provide product security engineering support and recommendations used to resolve integration and testing issues.Create and refine standard RMF Body-of-Evidence artifacts.Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.Participate in security architecture and design review meetings.Manage system access and revocation requests.Track and verify DoD certification requirements in accordance with DoD 8140 guidance.BenefitsMedical, Dental & Vision Insurance CoverageLife/ADD & Short/Long Term Disability Insurance401(k) Savings PlanEmployee Stock Purchase Plan (ESPP)Paid Time-Off (PTO)HolidaysEducation Reimbursement