Senior ISSO

Avid Technology Professionals•Annapolis Junction, MD

About The Position

Enhancing the system security posture by supporting the program, organization, system, or enclave's information assurance initiatives and enforcing security policies, standards, and methodologies. Overseeing security operations for information systems, managing daily security aspects, evaluating security solutions for classified processing, and conducting vulnerability and risk analysis/assessments for system authorization. Managing configuration and system integrity by administering configuration management for security software, hardware, and firmware, ensuring compliance with security controls, and assessing the impact of system changes. Developing and maintaining security documentation and System Security Plans lifecycle management activities to ensure compliance with system security requirements. Providing technical expertise in security policies and operations, supporting the implementation and maintenance of security measures and countermeasures, and collaborating with stakeholders to maintain compliance and strengthen the system security posture. Driving continuous improvement by assessing existing security processes, identifying vulnerabilities, and implementing proactive solutions to enhance system resilience.

Requirements

10+ years of in-depth experience as ISSO or combination of ISSO and other security related role supporting IC or DoD programs and contracts of similar scope, type, and complexity.
Proficient with customer security tools, corporate repositories, playbooks and guidelines.
Knowledgeable with applicable frameworks, regulations, standards, policies and procedures.
Operational understanding of server and IA technologies, internetworking protocols and services.
Certifications & Compliance with DoD 8140.03 with IAM Level II or higher (CASP+, CISSP or higher).
Must hold an active TS/SCI with Polygraph.
Bachelor of Science degree in Computer Science, Information Assurance, Information Security, or a related discipline, plus 12+ years of relevant experience.
In lieu of a degree, an additional 4 years of experience may be considered on a case by case basis.

Responsibilities

Enhance system security posture by supporting information assurance initiatives.
Enforce security policies, standards, and methodologies.
Oversee security operations for information systems.
Manage daily security aspects of information systems.
Evaluate security solutions for classified processing.
Conduct vulnerability and risk analysis/assessments for system authorization.
Administer configuration management for security software, hardware, and firmware.
Ensure compliance with security controls.
Assess the impact of system changes.
Develop and maintain security documentation.
Manage System Security Plans lifecycle activities.
Provide technical expertise in security policies and operations.
Support the implementation and maintenance of security measures and countermeasures.
Collaborate with stakeholders to maintain compliance and strengthen system security posture.
Assess existing security processes.
Identify vulnerabilities.
Implement proactive solutions to enhance system resilience.