Information System Security Officer

Scientific Research Corporation • Stafford, VA

3d • Onsite

About The Position

Overseeing security operations for STIG checks, ACAS scans, applying and assessing the NIST 800-53 security controls, POAM development, privacy impact analysis and other supporting artifacts
Leading the efforts for initial self-assessment and subsequent IV&V of a solution hosted in Azure and analyzing the security assessment report to identify gaps, prioritize risks, and advertise next steps in the POAM
Performing remediations as able, and coordinating with system engineers, network engineers, and other stakeholders to ensure security controls are effectively implemented
FILLING THIS POSITION IS CONTINGENT UPON FUNDING
#LI-LH1

Requirements

• At least two years performing assessment and authorization duties for a DoW system using the eMASS platform
• Excellent knowledge of NIST 800-53 security controls and their application, and working knowledge of NIST 800-144 guidelines on security and privacy in public cloud computing
• Experience applying FedRAMP frameworks to ensure compliance with 800-53 and other relevant guidance for DoD/DoW applications hosted in the cloud
• DoD 8570/8140 compliant with IAT 2/3 certification and training, such as Sec+, CISSP, other
• Maintain at least a secret clearance
• Be on site in Stafford, VA four days/week

Nice To Haves

• Technical understanding of Azure security fundamentals, demonstrated by experience or certification
• Familiarity with Agile frameworks, specifically Scaled Agile Framework (SAFe)

Responsibilities

• Overseeing security operations for STIG checks
• Overseeing security operations for ACAS scans
• Overseeing security operations for applying and assessing the NIST 800-53 security controls
• Overseeing security operations for POAM development
• Overseeing security operations for privacy impact analysis and other supporting artifacts
• Leading the efforts for initial self-assessment and subsequent IV&V of a solution hosted in Azure and analyzing the security assessment report to identify gaps, prioritize risks, and advertise next steps in the POAM
• Performing remediations as able, and coordinating with system engineers, network engineers, and other stakeholders to ensure security controls are effectively implemented

Benefits

• SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more.
• For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed