ISSO

ASM Research•Ashburn, VA

About The Position

Creates cyber-intelligence tools and methods and performs research and analysis to mitigate and eliminate high-level data and cybersecurity risks. Designs, tests, and implements secure operating systems, networks, and database products, conducts risk assessments, and provides recommendations for application design. The role leads investigations of complex computer and information security incidents, assesses compromise to national security information and automated information systems, and recommends security protocols to reduce future incidents. It also defines security objectives and system-level performance requirements; researches cyber vulnerabilities and countermeasures; configures and validates secure systems; tests security products; maintains incident, damage, and threat assessment programs; and performs formal Security Test and Evaluation (ST&E), system audits, corrective-action tracking, system-solution design, risk mitigation, and certification and accreditation support. The position reviews processes and security protocols and recommends improvements to cybersecurity protection.

Requirements

Bachelor’s degree in Computer Science or a related field, or equivalent experience.
8–15 years of experience in systems security.
Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation.
Ability to communicate effectively and present technical approaches and findings clearly.
Excellent attention to detail.
Ability to balance multiple tasks simultaneously.
Considerable latitude in determining technical objectives of assignments.

Nice To Haves

Advanced degree.

Responsibilities

Create cyber-intelligence tools and methods, and conduct research and analysis to mitigate high-level data and cybersecurity risks.
Design, test, and implement secure operating systems, networks, and database products.
Conduct risk assessments and recommend application designs.
Lead investigations of complex computer and information security incidents to determine the extent of compromise to national security information and automated information systems.
Recommend additional security protocols to reduce the likelihood of similar incidents.
Define security objectives and system-level performance requirements.
Research tools, techniques, countermeasures, and trends in computer network vulnerabilities.
Configure and validate secure systems, and test security products and systems to identify weaknesses.
Maintain computer and information security incident, damage, and threat assessment programs.
Conduct formal Security Test and Evaluation (ST&E), including pre-test preparation, participation in tests, analysis of results, and preparation of required reports.
Perform system audits and ensure corrective measures are completed.
Design, develop, or recommend integrated system solutions that protect proprietary and confidential data and systems.
Establish program control processes to mitigate risks and support system certification and accreditation.
Review processes and security protocols and recommend increased cybersecurity protection.
Communicate technical approaches and findings, and potentially interface with law enforcement and intelligence or government agencies.