Information System Security Officer

What you'll do

• Assess and request customer authorization for company-managed classified endpoints, servers, networks, and security appliances.
• Apply U.S. Government cybersecurity policies and guidance to information systems.
• Execute auditing, virus scanning, and configuration management for systems and network hardware.
• Monitor system administrator activities to ensure compliance with established security procedures.
• Document compliance criteria and test cases based on NIST, Intelligence Community, and DoD requirements.
• Perform system assessment and authorization using Governance, Risk, and Compliance (GRC) tools.
• Design and implement security controls to mitigate identified risks.
• Manage vulnerability scanning tool compliance and oversee the deployment of system patches.

What we're looking for

• Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
• Knowledge of Risk Management Framework (RMF) and performing system assessment and authorization through a GRC tool.
• Knowledge of risk mitigation and selecting/designing security controls for implementation.
• Knowledge of incident response, data loss prevention, detection, and response.
• Knowledge of NIST and FISMA requirements for monitoring and reporting.
• TS/SCI clearance with polygraph.
• HS diploma or GED.
• DoD 8570 IAM Level II Certification.
• Experience executing analysis, design, and implementation of enterprise cybersecurity solutions (preferred).
• Experience maintaining vulnerability scanning tool compliance, patch management, and assessing security impacts of changes (preferred).
• Experience engineering and implementing security-based solutions to automate and improve security posture (preferred).
• Excellent written and verbal communication skills (preferred).
• CISSP-ISSAP or CISSP-ISSEP Certification (preferred).