SITEC - ISSO
Peraton · MacDill AFB, FL, US
About this role
## Peraton — SITEC (ISSO / RMF Analyst) **Location:** MacDill AFB ### Overview Peraton is a national security company providing mission capability integration and enterprise IT solutions. This role supports the **Special Operation Command Information Technology Enterprise Contract (SITEC) - 3**, specifically the **SITEC 3 Enterprise Operations and Maintenance (EOM) Task Order** supporting USSOCOM and related commands. ### Responsibilities - Ensure the **security and integrity** of Federal/National Security information systems by **managing risk** and ensuring **compliance** with applicable regulations and standards. - Provide **hands-on cybersecurity support** for SOCOM systems focused on **RMF lifecycle activities**, including: - Continuous monitoring - Vulnerability management - Compliance reporting - Cybersecurity documentation development - Support IT risk management assessors performing **IT risk and control assessments** using government guidance and organizational policies. - Conduct walkthrough interviews and coordinate with client stakeholders/SMEs (e.g., system and database administrators). - Request, collect, review, and analyze artifacts to support IT control testing (e.g., security plans, SOPs, screenshots, configuration settings). - Evaluate the **design and operating effectiveness** of IT controls using provided artifacts and industry guidance. - Document control testing results clearly and consistently so a reviewer can reproduce the test and reach the same conclusion. - Summarize and communicate assessment results to client stakeholders, including senior leadership. - Plan and execute day-to-day IT control assessment activities independently and as part of a team. - Identify known control weaknesses, contributing causes, and develop practical remediation plans. - Support continuous monitoring activities to maintain system security. - Demonstrate working knowledge of **RMF**, **NIST SP 800-53**, and **NIST SP 800-37**. - Create/update **Security Assessment and Authorization (SA&A)** artifacts (e.g., **FIPS 199**, **Contingency Plans (CP)**, **CPT**, **System Security Plans (SSP)**). - Review **ACAS** vulnerability scan results, validate with system administrators, track remediation, and document vulnerability status. - Apply knowledge of IT risk and controls through audits, assessments, and security reviews. - Demonstrate knowledge of **FISMA**, **NIST SP 800 series**, **FISCAM**, and related federal information assurance guidance. - Support **FISMA** and **OMB Circular A-123** (or similar internal control assessments). - Familiarity with SOCOM-relevant security frameworks/assessment approaches (including **DISA DCAS**). - Familiarity with applicable **DoD STIGs/SRGs** and experience using **STIG Viewer**. - Proficiency in **eMASS**. - Proficiency in **Microsoft Excel, Word, and PowerPoint**. ### Qualifications - **Required experience (based on education):** - 12+ years with HS Diploma - 10+ years with AS/AA - 8+ years with BS/BA - 6+ years with MS/MA - 3+ years with PhD - **Active DoD TS/SCI clearance** - **3+ years** relevant experience in **IT Risk Management**, **Information System Security**, and/or **Cybersecurity** - Must be **DoD 8140 compliant** for **Work Role Code 722 — Information Systems Security Manager (Intermediate level or higher)** - **DoD 8570 IAT II** certification or higher ### Target Salary Range **$104,000 – $166,000** (typical range; final offer depends on experience, educat
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.