Information Security Officer MID

MAG Aerospace•Annapolis Junction, MD

3d•$145,000 - $150,000•Onsite

About The Position

At MAG, we provide and enable real-time situational awareness to help our customers make the world smaller and safer. We are laser focused on serving our customers by providing technical expertise, operational excellence, and flawless execution. Relentlessly driven by our dedication to service and performance, we have become the leading independent provider of manned/unmanned full-spectrum outsourced ISR services in the world. Our success is due entirely to the high caliber of employees we recruit, hire, and retain. At MAG, we look for individuals who thrive in a high-performance environment where challenges are the norm and success are expected. MAG Aerospace is seeking a resourceful Mid Level Information Security Officer (ISO) to join our team to support the Navy Cyber Warfare DevGru (NCWDG). Your role would be to provide Cybersecurity support as an Information Security Officer (ISO) ensuring the confidentiality, integrity, availability, authentication, and non-repudiation of information systems operating in a classified environment. Requires a current Top Secret security clearance. A CI Polygraph will be required within 6 months. Must be a US Citizen

Requirements

Proficient knowledge of Host Based Security Systems (HBSS) and the Assured Compliance Assessment Solution (ACAS)
Experience with the use fo the DoD/DISA Vulnerability Management System (VMS) and Electronic Enterprise Mission Assurance Support Service (eMASS)
Experience performing vulnerability/risk assessment analysis to support Assessment & Authorization (A&A).
Understanding and hands on experience in RMF processes and activities to obtain and maintain system ATO.
Advanced written and verbal communication skills.
Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG).
Demonstrated experience with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4.
Ability to create IA related acquisition documents.
Three to Five (3-5) years of Information Assurance/Cybersecurity (IA/CS) experience is required. Qualified candidates will have experience with Risk Management Framework (RMF),
Three to Five (3-5) years of experience with security controls and implementation delineated in Committee of National Security Systems
BS in Computer Science, Information Systems Management, or related area of study.
Current active TS/SCI DoD Security Clearance
Possess DoD Approved Baseline Certification as Information Assurance Manager Level II in accordance with DOD 8570.01-M. (i.e., CISSP, JSSEP, Sec+CE, GSNA, GSLC or CISM)
This position is 100% in Government spaces; no telework authorized
Must be a US Citizen

Nice To Haves

Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs.
Experience with risk analysis and assessment determinatiions
Experience with Xacta.
Current CI polygraph.

Responsibilities

Monitor the Command's information systems.
Ensure that all servers, switches, routers, crypto, fiber connections, attached leased circuits and distant end hardware are all fully secure and following proper operations through security scans and implementation of security controls as directed,
Monitor user accounts ensuring correct permissions are assigned for level of access.
Validate in hold accounts of detaching personnel from the Command.
Provide information assurance guidance and oversight for all Command networks and stand-alone systems,
Develop formal Information System Security, education and training, and awareness program coordinating with the Command Information Security Systems Manager (ISSM) and keeping the customer informed on all issues,
Coordinate Information Security inspections to include an incident response action should they be discovered,
Maintain liaison with high level professionals in other Commands/activities, intelligence agencies, and Contractor facilities to identify and define current and future technologies to support intelligence requirements,
Create system security plans, plan of action and milestones, security action plan, personnel training, and help maintain policies for all Command networks supporting the ISSM in all missions,
Monitor information security inspections to include incident response actions as well as ensuring corrective measures have been taken