Information Systems Security Manager

100fb474-2541-4c2f-af57-30809a5118b9•Huntsville, AL

11h•Onsite

About The Position

WaveLink, Inc. (WLI) is seeking an Information Systems Security Manager (ISSM) with expertise in U.S. Government information security. The role includes DISA STIG configuration; SCAP and Nessus/ACAS scanning; eMASS; and Windows Server and workstation access control and identity management. The ISSM will apply security measures to reduce risk and assess existing security boundaries to identify alternative approaches and cyber tools for consolidating ATO management. Duties include conducting risk assessments, designing security solutions, and creating and maintaining security policies and procedures. The role also uses security technologies such as firewalls, intrusion detection systems, and active defense measures to protect organizational information infrastructure and government solutions. Strong writing ability is a core job requirement. The position is based in Huntsville, Alabama, and requires an active clearance. WLI describes its work environment as proactive and employee-oriented and offers a comprehensive benefits package and competitive salaries.

Requirements

Bachelor's degree in computer science, information systems, or a related field.
At least 5 years performing as a domain, system, or network administrator.
At least 3 years performing information systems security engineering.
Minimum DoD Baseline Certifications for Level II: IAT / IAM / IASAE.
Active clearance required.
Expertise in DISA STIG configuration, SCAP and Nessus/ACAS scanning, eMASS, and Windows Server/workstation access control and identity management.
Solid understanding of NIST controls and implementation of datacenter security operations, including backup, COOP, auditing, and scan requirements.
Solid understanding of domain, server, workstation, storage, and network security.
Strong writing ability.

Responsibilities

Design and implement security measures; monitor systems for signs of cyber attacks and respond to security incidents.
Conduct audits and risk assessments to reduce the likelihood of security breaches.
Apply U.S. Government Information Assurance requirements and prepare IA artifacts for TS/SCI, Secret, and SAP information systems.
Review and/or generate ATOs, ISAs, ATCs, and IATTs.
Assess existing security boundaries and identify alternative approaches and cyber tools to consolidate ATO management.
Conduct risk assessments and design security solutions.
Create and maintain security policies and procedures.
Use security technologies, including firewalls, intrusion detection systems, and active defense measures, to protect information infrastructure and government solutions.