Information Systems Security Officer

What you'll do

• Perform risk assessments of systems and equipment to identify vulnerabilities and recommend solutions.
• Create and map Security Technical Implementation Guides (STIGs) and develop Plans of Action and Milestones (POA&M).
• Create documentation and packages to support Risk Management Framework (RMF) accreditations.
• Perform vulnerability management using automated systems and tools like ACAS and HBSS.
• Brief client leadership on technical security postures, including vulnerability summaries and threat mitigation advice.
• Implement infrastructure and cybersecurity controls to improve detection and event correlation in large enterprises.
• Leverage big data analytics to identify advanced threats or indicators of compromise.
• Report IT security events or incidents based on established policies and procedures.

What we're looking for

• 5+ years of experience with information assurance or cybersecurity.
• Experience serving as an Information Systems Security Officer (ISSO).
• Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS).
• Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls and create POA&Ms.
• Experience supporting system security and authorization processes.
• Experience reviewing vulnerability documentation and writing residual risk statements.
• Experience reporting IT security events or incidents based on policies and procedures.
• Secret clearance.