Overview
Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $4.5B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.
We are seeking an Advanced ISSO to direct the development, implementation, and enforcement of security policies and vulnerability management activities using tools like ACAS and DISA STIGs. In this role, you will manage continuous monitoring, advise leadership on Risk Management Framework (RMF) compliance, and mentor junior team members.
Responsibilities
- Lead the development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
- Direct vulnerability management activities using ACAS, DISA STIGs, and SCAP Compliance Checker.
- Oversee secure configuration of operating systems and network devices in accordance with DISA STIG requirements.
- Manage continuous monitoring efforts, conduct security audits, and drive risk mitigation strategies.
- Provide subject matter expertise on NIAP/Common Criteria certifications and DISA Approved Products List (APL) compliance.
- Prepare and review authorization documentation, certification letters, and MOAs for system interconnections.
- Advise program leadership, system owners, and engineers on RMF compliance and cybersecurity best practices.
Qualifications
Education / Certifications:
- CompTIA Security + is required
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related area of study is required. In lieu of a bachelor's degree, candidates must have 10 years of information system security officer / cybersecurity engineering experience in addition to a DoD approved baseline certification (CISM, CISSP, FITSP-M, GCIH, etc.) as defined by DoDD 8140-M.
- An active Top Secret clearance is required.
Experience:
- 10 years of engineering experience, including at least 5 years in Information Assurance/Cybersecurity (IA/CS).
- Demonstrated experience implementing the Risk Management Framework (RMF) in accordance with DoDI 8510.01.
- Extensive experience applying security controls outlined in CNSSI 1253, NIST SP 800-53, and JSIG.
- Able to conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP Compliance Checker with automated benchmarks.
- Proven experience implementing DISA STIG configurations across operating systems and network devices.
- In-depth knowledge of continuous monitoring, security audits, risk assessments, and mitigation planning for DoD systems.
- Experience evaluating NIAP/Common Criteria technologies and the DISA Approved Products List (APL).
- Background preparing certification letters, MOAs, and authorization documentation for system interconnections.
- Experience developing IA-related acquisition documentation.
- Familiarity with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4.
- Comfortable mentoring and guiding more junior teammates.
At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #LI-SL1