Information System Security Officer

Red Arch Solutions•Annapolis Junction, MD

1d•$181,000 - $190,000

About The Position

Red Arch is hiring an Information Systems Security Officer to safeguard organizational computer networks and systems and ensure the security, integrity, and confidentiality of data. The role involves designing, developing, implementing, and integrating information assurance and security systems and components across networking, computing, and enclave environments, including environments with differing data-protection and classification requirements. The officer assesses system architectures and functionality, contributes to attack-scenario development, and prepares technical reports and briefings. The position applies the Risk Management Framework, conducts or reviews technical security assessments, validates security requirements and designs, supports security architecture, and helps manage risks throughout the program lifecycle. It also supports certification and accreditation activities and operational security systems, including installation, configuration, patching, troubleshooting, and limited penetration testing. The officer works with application leads, system administrators, database administrators, developers, and testers to help ensure assigned systems comply with security requirements and achieve or maintain an Authority to Operate (ATO). The role includes loading and implementing STIG checklists, mitigating scan findings, supporting security assessment events, and responding to questions from PAT teams, ISSMs, and SCAs. Work locations listed are Annapolis Junction, Maryland; Washington, DC; and Reston, Virginia.

Requirements

14 or more years of professional experience with a bachelor's degree or equivalent; additional experience may be considered in lieu of a degree.
12 or more years of professional experience with a master's degree or equivalent; additional experience may be considered in lieu of a degree.
10 or more years of professional experience with a PhD or equivalent; additional experience may be considered in lieu of a degree.
Active Top Secret/SCI clearance with a polygraph.
Experience working with Xacta.
DoD 8140 / 8570 IAM Level II or equivalent baseline certification (for example, Security+ CE, CISSP, or CISM), if supporting DoD.

Responsibilities

Design, develop, implement, and integrate information assurance and security systems and components for networking, computing, and enclave environments.
Analyze architectures and system functionality across multiple technologies.
Contribute to the development and evaluation of attack scenarios.
Prepare and deliver technical reports and briefings.
Apply the Risk Management Framework to program systems and networks.
Perform or review technical security assessments to identify vulnerabilities and non-compliance, and recommend mitigation strategies.
Validate and verify system security requirements and establish system security designs.
Assist architects and systems developers in identifying and implementing information security functionality and uniform application security policy.
Support the building of security architectures.
Enforce the design and implementation of trusted relationships among external systems and architectures, including supporting the Government in this work.
Assess and mitigate system security threats and risks throughout the program lifecycle.
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and network operations.
Review certification and accreditation documentation and provide feedback on completeness and compliance.
Perform installation, configuration, maintenance, account maintenance, signature maintenance, patch management, and troubleshooting for operational information assurance and cyber network defense systems.
Perform limited penetration testing and routine exploit analysis.
Perform system or network designs spanning multiple enclaves and differing data-protection or classification requirements.
Recommend system-level solutions to resolve security requirements.
Work with application leads, system administrators, database administrators, developers, and testers to help systems comply with security requirements and achieve or maintain ATO.
Load artifacts such as STIG checklists and ACAS scans, help implement STIG checklists, and mitigate scan findings.
Answer questions to help ensure systems are developed with security compliance built in.
Support security assessment events and respond to questions from PAT teams, ISSMs, and SCAs.

Benefits

100% paid employee healthcare premiums.
HaloScripts concierge prescription medication service.
Generous paid time off.
401(k) with a 10% contribution, 6% match vested on day one, and up to 4% profit-sharing contribution.
Annualized bonus compensation.
Spot bonuses.
Tuition reimbursement.
529 college savings plan.
College loan payback program.
11 paid federal holidays.
Referral bonuses.