Information Systems Security Officer, Senior

American Systems•Colorado Springs, CO

1d•Onsite

About The Position

AMERICAN SYSTEMS is seeking a Senior Information Systems Security Officer with a Top Secret SCI Clearance and 5 - 7 years of experience to support our LAN Integration Team at Peterson AFB, Colorado. As a Senior Information Systems Security Officer with AMERICAN SYSTEMS, you will ensure the appropriate operational security posture is maintained for an information system and work in close collaboration with the ISSM and ISO. You will conduct periodic reviews of information systems to ensure compliance with the security authorization package, develop physical or logical topologies for a system, and assist the ISSM in meeting their duties and responsibilities. You will also prepare, review, and update authorization packages, ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media, and coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change. Additionally, you will monitor system recovery processes, ensure all IS security-related documentation is current and accessible, and ensure audit records are collected, reviewed, and documented. You will attend required technical and security training, execute the cyber security portion of the self-inspection, identify cyber security vulnerabilities and assist with countermeasures, and prepare reports on the status of security safeguards. You will perform ISSO duties, conduct security impact analysis activities, and perform continuous monitoring activities. You will also assist Department of Defense, National Agency and Contractor organizations with all RMF efforts. Up to 10 days of annual travel to support the program may be expected.

Requirements

U.S. Citizenship Required for the purposes of obtaining/holding a U.S. security clearance
Active TS/SCI Clearance and be SAP eligible, JSIG Experience
5-7 years of experience
Prior in roles such as System, Network Administrator or ISSO
IAM Level III certification (e.g. CISSP or CISSM)
Possess extensive experience and is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, work in close collaboration with the ISSM and ISO.
Have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system.
Must be familiar with DoD policy as it applies to implementing and executing system and network administration.
Strong understanding of network security principles and practices.
Experience solving technical problems quickly and identifying opportunities to automate repetitive processes.
Ability to work independently and as part of a team.
Detail-oriented with a commitment to accuracy and quality.
Experience with NIST SP 800 series and DoDI/D 8500 series

Responsibilities

Ensure the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISO.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Develop physical or logical topologies for a system, assist the ISSM in meeting their duties and responsibilities.
Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented (to include any anomalies).
Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans.
Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries.
Conduct continuous monitoring activities for authorization boundaries under your preview.
Assist Department of Defense, National Agency and Contractor organizations with all RMF efforts.