Information Systems Security Officer

What you'll do

• Perform risk assessments on systems and equipment to identify and mitigate security vulnerabilities.
• Create and map Security Technical Implementation Guides (STIGs) and develop Plans of Action and Milestones (POA&Ms).
• Create documentation and packages to support Risk Management Framework (RMF) accreditations.
• Perform vulnerability management using automated systems and tools like ACAS and HBSS.
• Brief client leadership on technical security postures and provide summaries of identified vulnerabilities.
• Implement infrastructure and cybersecurity controls to improve detection and event correlation in large enterprises.
• Leverage big data analytics to identify advanced threats or indicators of compromise.
• Review vulnerability documentation and write residual risk statements based on established policies.

What we're looking for

• 5+ years of experience with information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS).
• Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls and create POA&Ms.
• Experience supporting system security and authorization processes.
• Experience reviewing vulnerability documentation and writing residual risk statements.
• Experience reporting IT security events or incidents based on policies and procedures.
• Secret clearance.