Overview
The ISSO will support systems and security engineering and integration to specific Government-sponsored projects, pilots and prototypes.
This includes solution planning and engineering, defining security requirements, target architecture, interoperability and integration, system testing, Verification and Validation, Modeling and Simulation, studies and analysis, post-deployment security validation (PDSV), and project risk management.
As part of this effort, you will serve as an Information Systems Security Officer who will support the Agile processes in defining security requirements, translating RMF related governance and policies as well as supporting the reduction of cybersecurity risks to our customer's environments.
Responsibilities
Essential Duties and Responsibilities :
- Managing all aspects of an organization's information security system, for classified and unclassified systems, including researching, testing, training and implementing programs designed to safeguard sensitive information from any possible breaches.
- Understanding the Risk Management Framework (RMF), and how risk management is executed, what risk means, and how to analyze it.
- Spearheading Authority to Operate (ATO) and / or Authority to Proceed (ATP) efforts while making independent recommendations to Government Leads during these processes.
- Conducting risk analysis from vulnerability and compliance scans, pen testing results, or other audit activity.
- Creating written works to include but not limited to Plan of Action and Milestones, System Security Plans, System Specific Policies and Procedures, Configuration Management Plans, Contingency Plans and Test Results, Business Impact Analyses, and Security Impact Analyses.
- Participating in Agile Planning Events to provide technical input.
Qualifications
Education Requirements :
Bachelor’s degree in a technical discipline and 7+ years work experience or equivalent experience or 10 years related work experience, to include :
Clearance Requirements :
Position requires at minimum a Secret Clearance, must have the ability to be cleared up to the TS / SCI level
Technical Requirements :
Experience executing the NIST Risk Management Framework (RMF) and applying security practices found in NIST publications.
SP 800-53, SP 800-30, SP 800-60, FIPS 199, FIPS 140-2,
- Experience documenting System Security Plans to include security control implementation statements.
- Experience conducting periodic reviews of implementation statements to ensure persistent compliance with applicable government and agency level policies in addition to ISO and NIST standards.
- Experience validating the implementation of security controls within a cloud environment (AWS or Azure).
- Supporting the security assessment and authorization (or ATO) process.
- Analyzing testing results from scans, audits, penetration tests, or other test efforts to determine risk levels.
- Hands-on experience with vulnerability management tools such as Tenable Nessus and Security Center.
- Conducting Continuous Monitoring and maintaining the security posture of IT systems within on-prem, cloud, and hybrid environments.
- Knowledgeable on one or more cloud computing services and technologies including but not limited to : AWS, Microsoft Azure, VMware, etc.
- Familiarization with the Microsoft Office 365 Suite. (. Word, PowerPoint, SharePoint, Excel,
Preffered Skills / Qualifications :
- Cyber program experience within federal customer space a plus!
- Familiarization with Scaled Agile Frameworks (SAFe), agile development principles, and DevSecOps methodologies are a plus!
- Experience with managing vulnerabilities on virtualized IT systems and assets or virtual machines (. VDI and is a plus!
- Experience with SAFe Agile tools like Jira, Jira Align, or ServiceNow.
- Certifications such as CISSP, CCSP, AWS, Microsoft Azure, CISA, CAP, and SAFe 6 are highly desired.
Information Systems Security Officer
The ISSO is responsible for meeting regulatory and non-regulatory compliance (security best practices) demands, providing leadership over security assessment activities, working across system ownership and management organizations to test security controls, policies, and procedures, providing progra...
Control Systems Program Support Specialist (with active Secret Clearance - Yokosuka, Japan)
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. You may also be eligible to part...
Vice President, Chief Information Security Officer - Remote
Understand and translate the trade-offs required to manage the different levels of risk tolerance and risk exposure across the organization and balance this with risk investments. He/she will establish and evolve the Information Security strategy & roadmaps to meet or exceed all regulatory agenc...
Senior Systems Administrator / SolarWinds Specialist - Security Clearance Required
Lead the design and implementation of SolarWinds solutions to monitor and manage network performance, availability, and security. The successful candidate will be responsible for designing, implementing, and maintaining our network monitoring solutions, ensuring the optimal performance, security, an...
Information Systems Security Engineer
We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active Dut...
Senior Linux Systems Administrator – Clearance Required
The services enable the Data Transformation, Malware Analysis, and Cyber Threat Intelligence processing and sharing capabilities for the customer, fulfilling mission objectives and offering actionable information to detect and mitigate cyber threats. You are a Linux Systems Administrator, experience...
Senior Chief Engineer (ICC-B) - Security Clearance Required
Candidates must hold an active Top Secret Clearance with SCI eligibility and favorable Polygraph . Supervise HVAC Mechanics, Maintenance Mechanic/Carpenters, Fire Alarm Tech’s and General Maintenance Workers. EMCOR Government Services offers an experienced single-source solution for meeting the rout...
Information Systems Security Engineer (ISSE3)
Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements. Support security planning, assessment, risk analysis, and risk management. Provide security planning, assessment, risk analysis, and risk mana...
Senior Cyber Network Security Research Scientist - Security Clearance Required
Ability to clearly document and describe research to the government customer and their stakeholders so that you can demonstrate expertise and expand roles with the customer. Candidates will work in a dynamically changing environment and expected to be able to acquire and adapt new technologies to cr...
Security Officer (Unarmed - NIH)
Additionally, you will assist in preserving order and may act to enforce regulations and directives for the site pertaining to personnel, visitors, and premises; control access to client site and facility through the admittance process; responsive in all situations; monitors entrances and exits and ...