arlosolutionsllc · Aberdeen Proving Ground, MD · Aberdeen, Maryland, United States
<div class="content-intro"><p><strong>Company Summary</strong></p> <p>Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. </p></div><p><strong>Position Overview</strong></p> <p>Arlo Solutions seeks an experienced <strong>Cybersecurity Technical Specialist III / ISSO</strong> to support U.S. Army ATEC cybersecurity operations. The position provides technical expertise in DoD Risk Management Framework (RMF), security-control analysis, vulnerability management, eMASS, POA&M management, and Continuous Monitoring. Candidates must reside near APG or independently relocate before employment.</p> <p><span style="text-decoration: underline;">Full-time, on-site attendance at the Government installation is mandatory. RMF Execution: </span></p> <ul> <li>Perform assigned RMF activities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army requirements.</li> </ul> <p><span style="text-decoration: underline;">Security Controls: </span></p> <ul> <li>Analyze control implementations, technical configurations, compliance evidence, and deficiencies <ul> <li>develop accurate implementation statements and corrective recommendations.</li> </ul> </li> </ul> <p><span style="text-decoration: underline;">eMASS Management: </span></p> <ul> <li>Maintain assigned authorization packages, security controls, artifacts, findings, and supporting documentation for ATO/IATT and Continuous Monitoring activities.</li> </ul> <p><span style="text-decoration: underline;">Vulnerability Management: </span></p> <ul> <li>Review ACAS, SCAP, STIG, and other assessment results; <ul> <li>validate findings, coordinate remediation, and maintain accurate tracking records.</li> </ul> </li> </ul> <p><span style="text-decoration: underline;">POA&M Management: </span></p> <ul> <li>Document weaknesses, track remediation milestones, validate corrective actions, and maintain supporting evidence and traceability.</li> </ul> <p><span style="text-decoration: underline;">Continuous Monitoring: </span></p> <ul> <li>Conduct recurring security reviews, identify emerging risks, monitor compliance, and report material cybersecurity changes.</li> </ul> <p><span style="text-decoration: underline;">Technical Quality Assurance: </span></p> <ul> <li>Independently verify technical accuracy, completeness, evidence, and compliance before submitting deliverables.</li> </ul> <p><span style="text-decoration: underline;">Incident Coordination: </span></p> <ul> <li>Report significant vulnerabilities, suspected incidents, and security deficiencies through authorized channels.</li> <li>Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders to obtain evidence, validate configurations, resolve findings, and accomplish assigned RMF responsibilities.</li> <li>Maintain operational leadership visibility and communicate progress, obstacles, and cybersecurity risks professionally.</li> <li>Prepare and present accurate technical briefings covering RMF activities, vulnerabilities, security controls, POA&Ms, and Continuous Monitoring.</li> <li>Explain findings, supporting evidence, risks, remediation recommendations, and outstanding actions.</li> <li>Provide timely status updates and identify issues requiring leadership attention.</li> <li>The assigned Team Lead/O-ISSM serves as the primary operational tasking lead, operating under the oversight of the Project Lead, Program Manager, and authorized Government TPOC. </li> <li>Employees must follow reasonable, authorized direction from designated leadership, meet established deadlines, and promptly communicate conflicting instructions, technical concerns, or delays. </li> <li>System assignments do not confer exclusive ownership or independent managerial, ISSM, SCA, or Authorizing Official authority. </li> </ul> <p><span style="text-decoration: underline;">Professional Attire: </span></p> <ul> <li>Maintain APG/ATEC-required professional business attire throughout on-site duty hours, subject to approved exceptions.</li> </ul> <p><span style="text-decoration: underline;">Professionalism: </span></p> <ul> <li>Demonstrate respect, integrity, accountability, courtesy, and constructive workplace communication.</li> </ul> <p><span style="text-decoration: underline;">Customer Relations: </span></p> <ul> <li>Maintain professional Government relationships and follow established communication and escalation procedures.</li> </ul> <p><span style="text-decoration: underline;">Teamwork: </span></p> <ul> <li>Collaborate effectively, respect leadership responsibilities, accept