Information Systems Security Manager

Wavelink•Huntsville, AL

About The Position

WaveLink, Inc. (WLI), an expanding woman-owned small business based in Huntsville, Alabama, is seeking an Information Systems Security Manager (ISSM) with expertise in U.S. Government information security. The role focuses on DISA STIG configuration; SCAP and Nessus/ACAS scanning; eMASS; and Windows Server and workstation access control and identity management. The ISSM will assess existing security boundaries and identify alternative approaches and cyber tools to consolidate ATO management. Duties include conducting risk assessments, designing security solutions, and creating and maintaining security policies and procedures. The position also uses security technologies such as firewalls, intrusion detection systems, and active defense measures to protect organizational information infrastructure and government solutions. Strong writing ability is a core job requirement. The role is based in Huntsville, Alabama, and requires an active clearance.

Requirements

Bachelor's degree in computer science, information systems, or a related field.
At least 5 years performing as a domain, system, or network administrator.
At least 3 years performing information systems security engineering.
Minimum DoD Baseline Certifications for Level II: IAT, IAM, and IASAE.
Active clearance required.
Expertise in DISA STIG configuration, SCAP and Nessus/ACAS scanning, eMASS, and Windows Server/workstation access control and identity management.
Ability to apply U.S. Government Information Assurance requirements and prepare IA artifacts for TS/SCI, Secret, and SAP information systems.
Ability to review and/or generate ATOs, ISAs, ATCs, and IATTs.
Solid understanding of NIST controls and implementation of datacenter security operations, including backup, COOP, auditing, and scanning requirements.
Solid understanding of domain, server, workstation, storage, and network security.
Strong writing ability.

Responsibilities

Design and implement security measures.
Monitor systems for signs of cyber attacks and respond quickly to security incidents.
Conduct audits and risk assessments to reduce the likelihood of security breaches.
Apply U.S. Government Information Assurance requirements and prepare IA artifacts for TS/SCI, Secret, and SAP information systems.
Review and/or generate ATOs, ISAs, ATCs, and IATTs.
Assess existing security boundaries and identify alternative approaches and cyber tools to consolidate ATO management.
Conduct risk assessments and design security solutions.
Create and maintain security policies and procedures.
Use security technologies, including firewalls, intrusion detection systems, and active defense measures, to protect information infrastructure and government solutions.