Information Systems Security Officer
About The Position
E-INFOSOL LLC is seeking a full-time Information Systems Security Officer in Washington, DC, to support a federal agency. The role verifies compliance with FISMA, NIST, DISA STIG, FIPS, and NIPS, and supports establishing, implementing, and maintaining a life-cycle security model that safeguards information systems, services, and data while supporting agency missions. The officer oversees day-to-day security configuration, practices, procedures, and continuous monitoring; leads security authorization processes; manages cybersecurity posture, vulnerability management, incident response support, and Risk Management Framework activities; and maintains security control evidence and authorization documentation. The role also supports A&A activities and ATO maintenance, audits, recovery processes, and continuity-of-operations exercises. It advises leadership on security risks, strategy, project planning, and architecture, and coordinates with government managers, contractors, system owners, and security organizations to maintain compliance.
Requirements
- Active Top-Secret clearance, with capability to obtain SCI/CI Poly if needed to meet contract requirements.
- Bachelor's and/or advanced degree in computer science, business management, or an IT-related discipline.
- At least 7 years of experience serving as an Information Systems Security Officer (ISSO) or Information System Security Engineer at a cleared facility.
- At least 9 years of work experience in a computer science or cybersecurity-related field.
- At least one of the following certifications: CISSP, GISP, CompTIA CASP, or another certification exemplifying skill sets such as DoD Instruction 8570.1 IAM Level III proficiency.
- Familiarity with security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP WebInspect, Network Mapper (NMAP), or similar applications.
Responsibilities
- Ensure day-to-day implementation, oversight, continuous monitoring, and maintenance of security configurations, practices, and procedures for customer information systems.
- Lead security authorization processes and recommend security best practices and system configuration standards.
- Manage cybersecurity posture and analysis, including vulnerability management, incident response support, and Risk Management Framework activities.
- Upload security control evidence to the Governance, Risk, and Compliance application to support implementation during the monitoring phase.
- Prepare System Security Plans, POA&Ms, Risk Assessments, Privacy Impact Analyses, and supporting documentation for systems subject to NIST SP 800-53.
- Support security Assessment & Authorization activities and achieve and maintain ATO as required.
- Conduct required information system vulnerability scans according to risk assessment parameters.
- Coordinate system owner concurrence for correction or mitigation actions.
- Monitor security controls to maintain information systems' authorization to operate.
- Create security A&A documentation and maintain project system security procedures for the Information System Security Manager.
- Review system audit trails and report information system security incidents through appropriate channels.
- Ensure users have requisite clearances, authorization, and need-to-know, and understand their security responsibilities before access is granted; administer or witness signed user documentation.
- Manage information security audits conducted by federal departments or agencies, including third-party auditors.
- Report security-related incidents to the ISSM.
- Initiate protective and corrective measures, with ISSM approval, when a security incident or vulnerability is discovered.
- Interface with government managers and contractors to ensure understanding of and compliance with security requirements.
- Support certification activities throughout the A&A process.
- Oversee system recovery processes and continuity-of-operations exercises.
- Assess emerging network systems and enterprise-level risks and vulnerabilities; advise leadership on cybersecurity risk management, security strategy, project planning, and security architecture.
- Liaise with appropriate security organizations on the security status of configuration changes to operational systems.
Benefits
- Company-subsidized medical premiums, including family and dependent options.
- Dental and vision coverage.
- 401(k) retirement savings plan with up to 4% company match.
- Health Savings Account, Flexible Spending Account, and Dependent Care Flexible Spending Account.
- Company-paid short- and long-term disability, with supplemental options.
- Company-paid life and AD&D insurance, with supplemental options.
- Generous paid time off and all 11 federal holidays.
- Legal and identity protection services.
- Certification bonuses and reimbursement.
- UberOne.
- Company outings, including sporting events and happy hours.
- Discounts on services, including pet insurance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
