Senior Information System Security Officer

ERP International • Fort Meade, MD

1d • $160,000 - $190,000 • Onsite

About The Position

ERP International, LLC is seeking a Senior Information System Security Officer (ISSO) to support their DISA customer onsite at Fort Meade, MD, with potential for remote/hybrid options. The Senior ISSO is responsible for designing and implementing information assurance and security engineering systems, focusing on business continuity, operations security, cryptography, forensics, regulatory compliance, insider threat detection and mitigation, and physical security analysis. This role involves assessing and mitigating system security threats and risks throughout the program life cycle, validating system security requirements, establishing system security designs, and implementing security designs in hardware, software, data, and procedures. The position also includes verifying security requirements, performing system certification and accreditation planning and testing, and supporting secure systems operations and maintenance. A SECRET clearance is required. The company culture is described as fast-paced, fun, collaborative, energetic, and positive. The role is expected to be fully on-site initially, with potential for 1-2 remote days per week after an initial period.

Requirements

• Bachelor’s degree in Computer Science, Information Security, Information Technology or equivalent.
• Eight (8) years ISSO experience, or equivalent systems security related experience, and knowledge of systems functions, security policies, technical security safeguards, and operational system measures.
• CISSP certification.
• IAT Level II certification.
• Experience in using the eMASS system.
• eMASS Certification of Completion needed.
• Experience with reviewing security documentation to evaluate the adequacy of the security plan for upgraded networks. This evaluation shall ensure security solutions are effective and meet all security requirements for processing classified information.
• Experience performing vulnerability/risk assessment analysis to support certification and accreditation.
• Experience in preparing reports such as System Security Plans (SSPs), Risk Assessments Reports, Assessment and Authorization (A&A) packages and System Requirements Traceability Matrixes (SR TMs).
• An understanding the Risk Management Framework (RMF) that uses Committee on National Security Systems (CNSS) Instruction 1253 and the National Institute for Standards and Technology (NIST) 800-53 security controls.
• Working Knowledge of National Institute Standards and Technology (NIST) 800-37, 800-53, 800-53A, 800-160 Volumes 1 & 2.
• Must meet 8570 IAT II requirements to include one of the following certifications: CCNA Security, GIC SP, GSEC, Security+ CE, SSCP, CASP CE, CCNP Security, CISA, CISSP, GCED, GCIH.
• Excellent oral and written communication skills.
• Be willing and able to mentor others, and exhibit demonstrated excellent customer service skills.
• Must be authorized to work in the U.S.
• U.S. Citizenship is required.
• Must possess a minimum of a DoD Secret Clearance.

Nice To Haves

• An equivalent combination of education, certifications, and relevant experience may be considered.
• DEVSECOPS applications to software design for cloud applications.
• DoD and DISA specific experience.
• DISA ACAS Certification of Completion.
• Experience taking a High impact system thru the ATO process from start to finish in a DoD environment.

Responsibilities

• Ensure that the NIST Risk Management Framework (RMF) process is integrated into each level of the information system life cycle development.
• Ensure that cybersecurity requirements are allocated into the information system design.
• Have working knowledge of how Security Technical Implementation Guides are implemented into the information system security posture.
• Conduct preliminary assessments of vulnerability and compliance results and validate vendor mitigations to information system findings.
• Work with stakeholders to ensure that cybersecurity requirements are allocated to the system design.
• Research approved software and hardware products to be used with in the system.
• Support requirements verification testing against the engineering design to validate the compliance of cybersecurity requirements.
• Review and update SSPs as needed.
• Evaluate proposed changes to a system to ensure the change does not impact the system's security.
• Develop Assessment and Authorization artifacts for the information system eMASS records.
• Responsible for maintaining and enforcing all Information Security policies, standards, and guidelines.

Benefits

• Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!
• Health Advocate & Concierge Services!
• Unlimited Job- Related Training & Development!
• Employee Recognition & Incentive Programs!
• Employee Appreciation & Company Sponsored Events!
• Opportunity to work with leading edge technology!
• Community Outreach & Charity Work!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior