Information Systems Security Officer

E&M Technologies•Colorado Springs, CO

3d•Onsite

About The Position

E&M Technologies, Inc. is seeking an Information Systems Security Officer to join their team in Colorado Springs, CO, in support of the North American Aerospace Defense Command (NORAD). This role is crucial for ensuring the cybersecurity posture of mission-critical systems within the NISSC II portfolio. The officer will be responsible for maintaining compliance with Risk Management Framework (RMF) requirements and supporting Assessment and Authorization (A&A) efforts to ensure systems maintain an active Authorization to Operate (ATO). The position involves performing security analyses of threats, vulnerabilities, and system environments, and collaborating with government, supplier, and internal stakeholders to implement security measures that safeguard mission systems.

Requirements

Must have 5 or more years of general work experience
Must have 5 years or more of directly related experience
Experience applying Risk Management Framework (RMF) processes and principles in compliance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800 series.
Experience in developing and/or contributing to the RMF Body of Evidence, including creation and maintenance of applicable artifacts and documentation for security control implementation and assessment.
Experience performing NIST SP 800-53 control assessments for Secret systems, including assessment of technical, operational, and management security controls.
Experience utilizing Department of Defense RMF tools eMASS to document assessment results, track vulnerabilities, manage POA&Ms, and report compliance status.
Must meet the requirements outlined in DoDM 8140 in the Information System Security Manager role (722)
Must be a U.S. Citizen
Must have and be capable of maintaining a U.S. Department of Defense (DOD) security clearance at the required level

Nice To Haves

In-depth experience with the implementation of RMF processes in compliance with applicable DoD and industry cybersecurity policies and standards.
Proficient in utilizing security-relevant tools such as Assured Compliance Assessment Solution (ACAS) and Endpoint Security Solution (ESS) to identify vulnerabilities, assess risks, and recommend actionable mitigations.
Practical experience using Security Content Automation Protocol (SCAP) tools to analyze system configurations and check compliance with DoD Security Technical Implementation Guides (STIGs).
Strong interpersonal and communication skills, with the ability to collaborate effectively with cross-functional teams, customers, and third-party vendors.

Responsibilities

Play a key role in ensuring the cybersecurity posture of mission-critical systems within the NISSC II portfolio.
Have responsibility for maintaining compliance with Risk Management Framework (RMF) requirements and supporting Assessment and Authorization (A&A) efforts to ensure systems maintain an active Authorization to Operate (ATO).
Perform security analyses of threats, vulnerabilities, and system environments.
Collaborate with government, supplier, and internal stakeholders to implement security measures that safeguard mission systems.
Ability to perform continuous assessments of systems and network security measures to identify potential risks, vulnerabilities, and threats.
Expertise in developing effective risk prevention strategies and mitigation plans to protect organizational assets.
Ability to interpret and apply cybersecurity policies to operational systems and provide informed recommendations.
Familiarity with best practices for secure system architectures, vulnerability management, and incident response.
Ability to foster and promote a proactive cybersecurity culture within the organization through awareness and adherence to security principles.
Ability to present complex cybersecurity concepts and issues in a clear, concise manner to both technical and non-technical audiences.