Information Systems Security Officer IV

3 weeks ago


Herndon, United States DAn Solutions, Inc Full time

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK MUST WORK ON SITE

Job Description:ISSO responsibilities for new or existing system(s) may include:

• Defines information security requirements and their integration into information systems and its technology component through purposeful security design.
• Develops and implements security designs to ensure that the hardware, operating systems and software applications adequately address cyber security requirements and Security Controls Traceability Matrix (SCTM).
• Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommend mitigation strategies.
• Implement, validate Security Technical Implementation Guide (STIG) requirements and/or perform SRG assessments for all development and implementation projects.
• Develop, customize, and configure Splunk applications and dashboards.
• Develop Security Test Procedure (STP), conducts self-assessments to verify compliance with required configuration guidance and support A&A testing and validation of security designs.
• Conducting risk analysis reviewing ACAS, CVEs, plugins, CWEs, research, collaborate with System Administrators to mitigate identified vulnerabilities and/or author Plans of Actions and Milestones (PO&AM) as needed.
• Execution of continuous monitoring efforts responds to data calls, scan requests, and various weekly and monthly security metrics reporting requirements.
• Validate control implementations provide enforcement of the require data access and network flow restrictions align with the continuous monitoring strategy.
• Participates in Agile Planning Events to provide technical input.
• Support government activities and reporting to appropriate IC and DoD authorities (i.e., USCYBERCOM, IC-SCC)
• Support security authorization activities in compliance with the customer Information System Certification and Accreditation Process following the NIST Risk Management Framework (RMF), CNSSI No 1243 and other prescribed business processes for security engineering.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
• Apply system security engineering expertise in one or more of the following to: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.

Required Qualifications:

• Must be a US Citizen
• Active TS/SCI security clearance with the ability to obtain polygraph is required
• 8 years of relevant experience and a Bachelor's degree appliable to the position from an accredited college or university is required. A Master's degree relevant to the position may be substituted for two (2) years of additional experience. Four (4) years of additional ISSO experience may be substituted for a bachelor's degree.
• Must hold active Security+, CISSP, CISA, or equivalent certifications (DoD 8570 IAM 2 equivalent)
• Experience and in-depth working knowledge of FISMA and NIST Information Security Guides
• Understanding of FISMA, NIST, and Office of Management and Budget (OMB) Federal Information System requirements
• Demonstrated experience with DISA Security Technical Implementation Guide (STIG) implementation and Security Content Automation Protocol (SCAP) tool usage
• Provide guidance on vulnerability and malware remediation.
• Experience analyzing vulnerabilities, establishing cause and impact, and identifying the corrective action needed to eliminate and prevent the event from happening in the future.
• Advanced written and verbal communication skills

Desire Qualifications:

• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs
• Experience with performing Security Control Assessment in compliance with NIST SP 800- 37, NIST SP 800-53, NIST SP 800-53A, and other NIST 800 guide series
• Experience with risk analysis and assessment determinations incorporating system/mission owner, and unique operational constraints
• CSAM tool experience is preferred
• Understanding of FISCAM compliance
• Experience with Amazon Web Services (AWS)
• Experience with Xacta
• Current polygraph


  • Herndon, Virginia, United States Mantis Security Corporation Full time

    About the Role:Mantis Security Corporation seeks a skilled Information Systems Security Engineer to join our team of experts. As an ISSE, you will be responsible for defining information security requirements and integrating them into information systems and technology components through purposeful security design.Key Responsibilities:Develops and implements...


  • Herndon, United States Cape Fox Federal Contracting Group Full time

    Job Description Information Systems Security Officer (ISSO) Work Location: Reston, VA; work may also be performed at locations in the Washington, DC National Capital Region (NCR) (i.e., The District of Columbia; Arlington, Fairfax, Loudon, Prince William, and Stafford counties in VA (including incorporated cities) and Prince George and Montgomery...


  • Herndon, United States iNovex Information Systems Full time

    Job BriefA&A; RMFJob DescriptionWe‘re searching for talented individuals who provide engineering services for network infrastructure as well as sophisticated enterprise computing infrastructure including end-point devices, data center hosted servers, multi-Cloud services as well as virtualized applications, and storage systems. This program will maximize...


  • Herndon, United States iNovex Information Systems Full time

    Job Brief A&A; RMF Job Description We're searching for talented individuals who provide engineering services for network infrastructure as well as sophisticated enterprise computing infrastructure including end-point devices, data center hosted servers, multi-Cloud services as well as virtualized applications, and storage systems. This program will...


  • Herndon, United States iNovex Information Systems Full time

    Job Brief A&A; RMF Job Description We're searching for talented individuals who provide engineering services for network infrastructure as well as sophisticated enterprise computing infrastructure including end-point devices, data center hosted servers, multi-Cloud services as well as virtualized applications, and storage systems. This program will maximize...


  • Herndon, Virginia, United States iNovex Information Systems Full time

    Job OverviewWe are seeking a talented Cyber Security Systems Engineer to join our technology-based program supporting a key government customer.The ideal candidate will have at least 16 years of experience in supporting A&A projects and possess multi-tasking skills, as well as be a good communicator/facilitator. Comfortable at all levels from developer to...


  • Herndon, United States Insight Global Full time

    Title: Information Security Analyst/Cloud Security Analyst - ISSOLocation: FULLY REMOTE - must work EST hoursDuration: 1 year contractCompensation: $50/hr to $62/hr.Required Skills and Experience *- 8+ years of Security Analyst experience- 2+ years working in a Cloud environment and FedRAMP protocols- Expert in FIPS 199 process- Expert with FISMA, risk...


  • Herndon, Virginia, United States General Dynamics Information Technology Full time

    About the PositionWe are seeking a highly skilled Information Security Analyst to join our team at General Dynamics Information Technology. As an Information Security Analyst Expert, you will be responsible for ensuring the security and reliability of mission-critical systems for our clients.With 10+ years of experience in IT and cybersecurity, you will have...


  • Herndon, Virginia, United States Mantis Security Corporation Full time

    About Mantis Security CorporationMantis Security Corporation is a leading specialty firm of high-caliber talent specializing in Cyber Operations, Cyber Defense, Information Assurance, Software Development, DevSecOps, Security Engineering, and Cloud Engineering. We empower and protect our nation's most critical IT assets by investing in the long-term career...


  • Herndon, Virginia, United States Tenica Global Solutions Full time

    Job Summary:We are seeking an Information System Security Consultant to join our team at Tenica Global Solutions. As an ISSE, you will be responsible for ensuring the security compliance of systems and obtaining IC reciprocity for at least one security accreditation project.The ideal candidate will have five or more (5+) years' experience creating and...


  • Herndon, Virginia, United States Chameleon Consulting Group Full time

    About the RoleAt Chameleon Consulting Group, we're seeking an experienced Senior Information System Security Manager to join our team. As a key member of our security team, you'll be responsible for driving security innovation and implementation on our projects.Key Responsibilities:Manage and develop artifacts as part of a Government Authorization to Operate...


  • Herndon, Virginia, United States iNovex Information Systems Full time

    About UsiNovex Information Systems is a mid-sized science and technology company dedicated to solving our customers' toughest mission challenges.Our MissionWe deliver encompassing mission assurance and critical systems support to government customers across various U.S. locations.


  • Herndon, United States DAn Solutions Inc Full time

    REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLY - NO REMOTE WORK Work performed in a SCIF. Telework not available for this position. Seeking a Linux Systems Administrator IV candidate to support an Intelligence Community customer in the Washington D.C., Maryland, and Virginia area. The candidate will be responsible for ensuring systems are fully operating...


  • Herndon, United States DAn Solutions Inc Full time

    REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLY - NO REMOTE WORK Work performed in a SCIF. Telework not available for this position. Seeking a Linux Systems Administrator IV candidate to support an Intelligence Community customer in the Washington D.C., Maryland, and Virginia area. The candidate will be responsible for ensuring systems are fully operating...


  • Herndon, Virginia, United States BAE Systems USA Full time

    We are seeking a Network Security Systems Specialist to join our team at BAE Systems USA. This role will involve evaluating and recommending security controls for network environments, as well as documenting security control implementations and gathering artifacts to support Risk Management Framework (RMF) and ICD 503 Security Accreditation.About the...


  • Herndon, United States Two Six Technologies Full time

    At Two Six Technologies, we build, deploy, and implement innovative products that solve the world's most complex challenges today. Through unrivaled collaboration and unwavering trust, we push the boundaries of what's possible to empower our team and support our customers in building a safer global future. At Two Six Technologies, we build, deploy, and...


  • Herndon, United States Chameleon Consulting Group Full time

    Company Overview CCG delivers solutions to the most challenging problems our nation faces in cyberspace. We combine extensive cyber tradecraft with a principled, innovative, and asymmetric approach to deliver unparalleled results. Excellence is our standard and mission success is our metric. Role As a CCG Senior ISSM, you will be directly embedded with...


  • Herndon, Virginia, United States SilverEdge Full time

    About the OpportunitySilverEdge Government Solutions seeks a seasoned Cyber Security System Engineer to join our dynamic team. As a key member of our cybersecurity team, you will be responsible for evaluating and maintaining the security posture of information systems.ResponsibilitiesEvaluate information system design for security aspects and...


  • Herndon, Virginia, United States The Dignify Solutions LLC Full time

    We are seeking an Information Systems Security Specialist to join our team at The Dignify Solutions LLC. This is a full-time position with a salary range of $110,000 - $160,000 per year.About the Job:The successful candidate will have experience in Windows and Linux operating systems and common applications. They will be responsible for designing,...


  • Herndon, United States Disability Solutions Full time

    Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the...