ISSO- Top Secret- On Site

Experience with DODI 8510.01, 8500.01, NIST SP 800-37, 800-137, 800-53 rev 4/5, 800-39, 800-171 and 800-171A for self-assessments; NIST 800-100, NIST 800-18.
Familiar with creating Assessment and Authorization (A&A) packages in eMASS and/or Xacta and applying security categorization per the NIST FIPS 199 and NIST SP 800-60.
Experience in performing and assessing Security and Privacy Controls per NIST 800-53 rev 4/5 and NIST 800-53a guidelines.
Experience with systems engineering design and development toward a "baked-in" security design using Information Assurance best practices.
Understanding of the FedRAMP process, coordinating with 3PAO's, and migrating on prem systems to an accredited cloud-based solution (e.g. AWS (GovCloud), Azure).
Understanding of vulnerability and scanning tools such as Assured Compliance Assessment Solution (ACAS) and well-versed in interpreting risk posture resulting from assessment reports.
Knowledge of vulnerability management, risk management, project management, proficient with Microsoft products - Word, Excel, PowerPoint.
Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.
Experience with Tenable's Nessus and/or Security Center, or Network Mapper is a plus.
Risk assessment experience, especially with NIST SP 800-53 Threat identification, system security categorization, gap analysis, and compliance reporting.
Must be able to validate security patches as they align to NIST guidelines, client policies and procedures, and OMB Mandates.
Experience with creating or maintaining security artifacts as part of the ATO package including but not limited to; System Security Plan (SSP), Contingency Plans (CP), Disaster Recovery Plans (DRP), Plan of Action and Milestone (POA&M), Incident Response (IR), and other security documentation.
65, 140K

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:


Required Skills & Experience
- 4-8 years relevant experience.
- Experience with full cycle steps 1-7 RMF to include
continuous monitoring, change management, and software evaluation
- Xacta experience
- Understanding stigs with tools like evaluate-stig, stigviewer, or emasster.
- Must possess an Active Top Secret clearance and clearable to SCI
- IAT Level 2- Security Plus CE
- Comfortable going in daily with start time between 6:00-9am and willing to work daily in Oakton but will require travel to Arlington as needed.


Nice to Have Skills & Experience

SAP Experience


Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.