Information Systems Security Officer

E-Infosol LLC•Washington, DC

13d•$155,000 - $165,000

About The Position

E-INFOSOL LLC is seeking a full-time Information Systems Security Officer in Washington, DC to support a federal agency. The role verifies compliance with FISMA, NIST, DISA STIG, FIPS, and NIPS requirements, and supports establishing, implementing, and maintaining a lifecycle security model for information systems, services, and data to safeguard confidentiality, integrity, and availability in support of agency missions. The officer oversees daily security configuration, practices, procedures, continuous monitoring, authorization, vulnerability management, incident response support, and Risk Management Framework activities. The position develops and maintains security authorization documentation, supports A&A and ATO, uploads security evidence to a GRC application, coordinates remediation with system owners, manages security audits, and advises leadership on cybersecurity risks and strategy. The role also supports system recovery and COOP exercises, reviews audit trails, and coordinates with government managers, contractors, and security organizations.

Requirements

Active Top-Secret clearance, with capability to obtain SCI/CI Poly if needed to meet contract requirements.
Bachelor’s and/or advanced degree in computer science, business management, or an IT-related discipline.
Seven years of experience serving as an Information Systems Security Officer or Information System Security Engineer at a cleared facility.
Nine years of work experience in a computer science or cybersecurity-related field.
At least one of the following certifications: CISSP, GISP, CompTIA CASP, or another certification exemplifying skill sets such as those described in DoD Instruction 8570.1 IAM Level III proficiency.
Familiarity with security tools such as Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP WebInspect, Network Mapper (NMAP), or similar applications.

Responsibilities

Ensure day-to-day implementation, oversight, continuous monitoring, and maintenance of security configurations, practices, and procedures for customer information systems.
Lead security authorization processes and recommend security best practices and system configuration standards.
Manage cybersecurity posture and analysis, including vulnerability management, incident response support, and Risk Management Framework activities.
Upload security control evidence to the Governance, Risk, and Compliance application to support implementation during monitoring.
Write System Security Plans, POA&Ms, Risk Assessments, PIAs, and supporting documentation for systems subject to NIST SP 800-53.
Support security Assessment & Authorization activities and achieve and maintain ATO as required.
Conduct information system vulnerability scans according to risk assessment parameters.
Coordinate system owner concurrence for correction or mitigation actions.
Monitor customer information system security controls to maintain ATO.
Create security A&A documentation and maintain project system security procedures for the ISSM.
Review system audit trails and report information system security incidents through appropriate channels.
Ensure users have required security clearances, authorization, and need-to-know, and understand their security responsibilities before access is granted; administer or witness signed user documentation.
Manage information security audits conducted by federal departments and agencies, including third-party auditors.
Report security-related incidents to the ISSM.
Initiate protective and corrective measures, with ISSM approval, when a security incident or vulnerability is discovered.
Interface with government managers and contractors to ensure understanding of and compliance with security requirements.
Support certification activities throughout the A&A process.
Oversee system recovery processes and Continuity of Operations exercises.
Assess emerging network systems and enterprise-level risks and vulnerabilities; advise leadership on cybersecurity risk management, security strategy, security project planning, and security architecture.
Liaise with appropriate security organizations on the security status of configuration changes to operational systems.

Benefits

Company-subsidized medical premiums, including family and dependent options.
Dental and vision coverage.
Retirement savings plan with up to a 4% 401(k) match.
Health Savings Account, Flexible Spending Account, and Dependent Care Flexible Spending Account.
Company-paid short- and long-term disability coverage, with supplemental options.
Company-paid life and AD&D coverage, with supplemental options.
Generous paid time off and all 11 federal holidays.
Legal and identity protection services.
Certification bonuses and reimbursement.
UberOne, company outings, and discounts on services including pet insurance.