Information Systems Security Officer

General Dynamics Information Technology

7d•$129,813 - $172,500•Remote

About The Position

Seize your opportunity to make a personal impact as an Information Systems Security Officer supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The Information Systems Security Officer will work as part of the cloud engineering team to build and support the modernization of enterprise-class software applications.

Requirements

7+ years of experience project leadership in monitoring computer networks and security issues, investigating and resolving security and cybersecurity incidents.
Bachelor's degree in Computer Science, Computer Programming, Computer Engineering or relevant computer-based major.
Required past ATO experience in AWS environment for large agency. (4+ years’ experience).
Required solid understanding of NIST Standards.
Must have prior experience with the ATO process, FedRAMP, CIS, ISO 27001. (4+ years).

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Experience in documenting security incidents and performing security vulnerability assessments.
Experience working with Agile teams and SAFe to perform testing and uncovering system and network vulnerabilities.
Strong working experience in AWS Cloud Security (Certification is preferred) (3+ years’ experience).
Solid understanding on ICAM, SIEM, Vulnerability management tools.
Experience with CSAM or similar tools.

Responsibilities

Write and maintain documents required for Authority to Operate (ATO) during all phases of ATO.
Coordinate with customer’s IT security team, engineering team, and other client team to gather information to document ATO process.
Coordinate with project management team for documenting Configuration Management, SDLC, etc.
Create Visio diagrams as part of the documentation.
Support ATO assessment process.
Actively participating in ATO assessment.
Perform, monitor, test, and troubleshoot hardware and software Information Assurance (IA) problems pertaining to the Computing Environment (CE), Network Environments (NE), and enclave environments.
Collect and analyze data and events from Computer Network Defense (CND) tools such as system alerts, firewall, and network traffic logs, and host system logs.
Assess and identify the systems and networks within the NE acceptable configurations and policies.
Develop and manage security for more than one IT functional areas (e.g., data, systems, network and/or web) across the enterprise.
Lead in the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines).
Brief and present status reports on security matters to develop security risk analysis scenarios and response procedures.
Responsible for the tracking and monitoring of software viruses.
Lead in the evaluation of products and/or procedures to enhance productivity and effectiveness.
Provide direct support to the business and IT staff for security related issues.
Possess extensive knowledge in networking, databases, systems and/or web operations, and developing enterprise security strategies.