Information Systems Security Officer
About The Position
Leidos’ Digital Sector is hiring an Information Systems Security Officer to support the Homeland Enterprise Information Technology Secure Services and Support (HEITS) Contract and the Department of Homeland Security (DHS) Insider Threat Program (ITP). The role supports security accreditation and sustainment activities for a program that uses advanced analytics, monitoring, and data correlation to identify and address insider threats to the department. The position supports security engineering and the integration and deployment of security technology for external-threat, insider-threat, and cyber operations. It also supports vulnerability scanning, security assessments, baseline compliance, and certification and accreditation activities. The ISSO reviews and tracks authorization packages and maintains applicable Body of Evidence documentation, while reporting status and findings to the government.
Requirements
- Bachelor’s degree and at least 8 years of relevant experience, or a master’s degree and at least 6 years of relevant experience; additional experience or education may be considered in lieu of a degree.
- Excellent written and oral communication skills.
- Experience developing and maintaining technical documents, analyses, and reports.
- Experience preparing and presenting briefings to senior customer management and customer stakeholders.
- Ability to obtain DHS EOD SCI.
Nice To Haves
- Master’s degree from an accredited college or university in IT Management, Engineering, or a related field.
- At least 6 years of Information Assurance Management experience.
- Security+ or a similar certification.
- Extensive experience with the Risk Management Framework (RMF).
- Extensive experience with ICD-503.
- Extensive experience developing security accreditation packages and achieving Authorities to Operate (ATOs).
- Experience supporting security accreditation activities within the Intelligence Community.
Responsibilities
- Support security engineering and the integration and deployment of security technology for external-threat, insider-threat, and cyber operations.
- Resolve concerns or issues related to User Activity Monitoring (UAM) components within 48 hours and acknowledge government requests within one hour during normal business hours.
- Perform weekly vulnerability scans, or scans as directed by the government, in support of FISMA requirements.
- Coordinate with system owners, system administrators, or ISSOs before weekly scans and arrange for scan results to be forwarded to the ITP for analysis.
- Support security assessments by helping define scope, develop test plans and rules of engagement, obtain government approval, analyze results, prepare written reports of findings, impacts, and recommendations, and brief findings.
- Provide quarterly updates on scan coverage and report coverage issues to the government.
- Analyze scan results and prepare written analysis reports for the government monthly, as needed, or upon request.
- Conduct ITP-directed, non-scheduled vulnerability scans in support of operational matters.
- Support baseline compliance for information systems and applications being accredited or reaccredited through the DHS certification and accreditation process.
- Review ongoing ATO, ATC, and IATT authorizations and report their status in the Weekly Activity Report.
- Ensure open ATOs, IATTs, and ATCs are documented in the Project Plan and IMS.
- Develop a schedule for submitting Assessment & Authorization packages for assessment, subject to government technical representatives’ ability to adjust the schedule for mission requirements.
- Maintain Body of Evidence documentation for which the ISSO is the primary author for the duration of the contract.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
