Information Systems Security Officer

Leidos•Springfield, VA

About The Position

Leidos is hiring an Information Systems Security Officer for the Digital Sector to support the Homeland Enterprise Information Technology Secure Services and Support (HEITS) Contract and the Department of Homeland Security (DHS) Insider Threat Program (ITP). The role supports security accreditation and sustainment activities for a program that uses advanced analytics, monitoring, and data correlation to identify insider threats and help protect the DHS mission. The ISSO supports security engineering and the integration and deployment of security technology for external-threat, insider-threat, and cyber operations. The position also supports vulnerability scanning, security assessments, baseline compliance, and DHS certification and accreditation activities. The ISSO reviews and tracks authorization packages and maintains documentation, coordinating with system owners, administrators, government representatives, and other security personnel.

Requirements

Bachelor’s degree and at least 8 years of prior relevant experience, or a master’s degree and at least 6 years of prior relevant experience; additional experience or education may be considered in lieu of a degree.
Excellent written and oral communication skills.
Experience developing and maintaining technical documents, analyses, and reports.
Experience preparing and presenting briefings to senior customer management and customer stakeholders.
Ability to obtain DHS EOD SCI.

Nice To Haves

Master’s degree from an accredited college or university in IT Management, Engineering, or a related field.
At least 6 years of proven experience in Information Assurance Management.
Security+ or similar certification.
Extensive experience with the Risk Management Framework (RMF).
Extensive experience with ICD-503.
Extensive experience developing security accreditation packages and achieving Authorities to Operate (ATOs).
Experience supporting security accreditation activities within the Intelligence Community.

Responsibilities

Support security engineering and the integration and deployment of security technology for advanced external-threat, insider-threat, and cyber operations.
Resolve concerns or issues related to UAM components within 48 hours and acknowledge government requests within one hour during normal business hours.
Perform weekly vulnerability scans, or scans as directed by the government, in support of FISMA requirements.
Coordinate vulnerability scanning with the relevant system owner, system administrator, or ISSO, and ensure scan results are forwarded to the ITP for analysis.
Support security assessments by helping define scope, develop test plans and rules of engagement, obtain government approval, analyze results, prepare written findings and recommendations, and brief findings.
Provide quarterly status updates on scan coverage and report coverage issues to the government.
Conduct technical analysis of scan results and prepare written analysis reports for the government monthly, as needed, or upon request.
Conduct ITP-directed vulnerability scans for operational matters outside the scheduled scans.
Support baseline compliance for information systems and applications being accredited or reaccredited through the DHS certification and accreditation process.
Review ongoing ATO, ATC, and IATT authorizations and report their status in the Weekly Activity Report.
Ensure open ATOs, IATTs, and ATCs are documented in the Project Plan and IMS.
Develop a schedule for submitting Assessment & Authorization packages for assessment, subject to possible schedule changes by government technical representatives based on mission requirements.
Maintain Body of Evidence documentation for which the ISSO is the prime author for the duration of the contract.