Information Systems Security Officer

3 weeks ago

Washington, United States DANASTAR Professional Services, LLC Full time

DANASTAR is currently seeking talented, experienced Information System Security Officers (ISSO) for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets.

The ideal candidate will have hands-on experience with the safeguarding of Federal government IT environments.In addition, the candidate should be able to Lead and coordinate assessment and authorization, continuous monitoring, and risk management activities to ensure the security posture of client IT systems.The candidate should be able to work independently and in a group environment.The candidate will develop and maintain policies, standards, procedures to ensure compliance while working closely with client system owners, designated information system security officers, and other system stakeholders.Additionally, the candidate should be able to apply their understanding of FISMA, OMB regulations, and NIST standards and informs client leadership of cybersecurity best practices.

The candidate should be able to lead cross-functional cybersecurity projects to successful completion using project management approaches; as well as provide leadership and guidance in the creation, management, and closure of Plan of Action and Milestones to assure remediation of control implementation findings and mitigation of risks.The candidate will need to work collaboratively with internal client stakeholders by facilitating the assessment of systems and developing reports for client leadership.The candidate will need to be able to lead a team of security analysts in conducting security impact assessments for client change requests and informs the Change Control Board of identified risks.Also, the candidate will manage the clients A&A document repository and assure IT system security documents are current and compliant

The ideal candidate will have experience with Continuous Monitoring, Continuous Authorization, and FedRAMP assessments and will keep up-to-date on emerging trends in the cyber security field.

Required Qualifications:

  • An industry certification such as CASP, CAP, CISSP, CISM, GSEC, GMON, Security+
  • 4 years of experience in Information Assurance
  • BachelorsDegree in Computer Science, Computer Engineering, Information Systems or equivalent experience.

Job Duties:

  • Support of each step within the RMF lifecycle while using CSAM, with direct hands-on experience planning, creating artifacts, tailoring security controls, and verifying security control recommendations were implemented for on-prem and cloud-based capabilities
  • Hands-on experience using Nessus, Qualys, Vulnerator, and STIG Viewer in support of the A&A and continuous monitoring processes.
  • Hands-on experience implementing recommendations from STIGs, developing STIG checklists, and using tools, such as STIG Viewer, Nessus, and/or Vulnerator to verify and track results
  • Hands-on experience obtaining relevant STIGs, NSA, and NIST recommendations, along with CIS benchmarks and/or vendor best practices for securing networking devices, workstations, and/or servers, and application security
  • Hands-on experience creating, managing, and updating required artifacts for an A&A package
  • Must be able to communicate effectively in the English language, absorb constructive criticism, and not be combative if a system owner doesn't understand what you're asking for related to the A&A process, as well as be able to track communication efforts, coordinate meetings, capture talking points, and lead the discussions related to the A&A process
  • Candidates may be asked to demonstrate through a video call the process of using tools such as the STIG Viewer or Vulnerator, associated NIST / RMF websites, etc..
  • Assess the information system based on agency policies and provide recommended corrective actions to reduce risk associated with the system deficiencies and deviations from industry standards.
  • Collaborate with system personnel on identified deficiencies, complete the Security Assessment Report (SAR), and provide security authorization recommendations to the Certifying Official or AO.
  • Ensure FISMA systems are assessed and accredited to receive an Authority to Operate (ATO).
  • Monitor and execute the operations and maintenance of an information system and dispose of system and data according to the approved security authorization process
  • Serve as a member of the Architecture Review Board (ARB) and ensure system security requirements are addressed during the system lifecycle.
  • Establish audit trails, ensure their regular review, and make audit logs available upon request.
  • Develop and maintain the system security plan (SSP), security assessment plan/report (SAP/SAR), POA&Ms, security control assessment, and authorization memorandums in CSAM.
  • Conduct various security controls assessments (automated and manual) at different frequencies specific to a system and based on an established core control assessment schedule and provide results to include control gaps or weaknesses, risk level, cost- benefit analysis, and impact.
  • Support the development of the systems Privacy Impact Assessments (PIA), interconnection security agreements, incident response plan, contingency plan, risk assessments, configuration management plan, security impact assessments, standard operating procedures, and guides as necessary.
  • Review and analyze all system artifacts for accuracy and completeness in support of authorization to operate (ATO) requests.
  • Create or review ATO packages prior to submission to the Authorizing Official.
  • Ensure all assessment and audit reports are uploaded properly in CSAM.
  • Conduct reviews of closed POA&Ms for completeness and compliance.
  • Develop and support the OA process that includes continuous monitoring activities using clients GRC tools.
  • Draft document, review and provide feedback on application of security requirements.
  • Contribute to configuration management process development.
  • Execute activities within the information system contingency planning process; provide technical advice and guidance in business continuity/COOP program development, conduct vulnerability and risk analysis, provide support to ensure business processing, recovery criticality and resources requirements are identified and aligned with information system resources and recovery priorities to support the continued operation of the mission

  • Senior Information Systems Security Officer

    8 hours ago

    Washington, United States Information Protection Solutions Full time

    Job Description Job Description Information systems security officers (ISSO) research, develop, implement, test and review an organization's information security in order to protect information and prevent unauthorized access. Officers inform users about security measures, explain potential threats, install software, implement security measures and monitor...

  • Senior Information Systems Security Officer

    1 month ago

    Washington, United States Information Protection Solutions Full time

    Job DescriptionJob DescriptionInformation systems security officers (ISSO) research, develop, implement, test and review an organization's information security in order to protect information and prevent unauthorized access. Officers inform users about security measures, explain potential threats, install software, implement security measures and monitor...

  • Information Systems Security Manager/Officer

    2 weeks ago

    Washington, United States Watershed Security Full time

    COMPANY OVERVIEW Watershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust and respect with our...

  • Information Systems Security Manager/Officer

    4 weeks ago

    Washington, United States Watershed Security Full time

    Job DescriptionJob DescriptionCOMPANY OVERVIEWWatershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust...

  • Information Systems Security Officer

    2 days ago

    Washington, United States Demand Drive Solutions LLC Full time

    Job Title: Information Systems Security Officer (ISSO) Location: Washington, DC Salary : - $110,000 $120,000 / yr Roles and Responsibilities: Services to support IS Security performed by the Senior Cloud Information System Security Officer (ISSO), at a minimum, shall consist of the following activities: Ensure the day-to-day implementation, oversight,...

  • Information System Security Engineer

    1 month ago

    Washington, United States Information Protection Solutions Full time

    Job DescriptionJob DescriptionRESPONSIBILITYAnalyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend...

  • Information Systems Security Officer

    7 hours ago

    Washington, United States Secret Full time

    ** Information Systems Security Officer** **Department of Homeland Security** **Location** 1 vacancy in the following location: + **Duties** The selectee will serve as an Information Security Specialist in the Office of Professional Responsibility. Typical work assignments include: * Overseeing and providing direction on insider threat program operational...

  • Information Systems Security Officer

    1 day ago

    Washington, United States TekSynap Full time

    Responsibilities & Qualifications RESPONSIBILITIES The Information Systems Security Officer is expected to be able to : Support Engineering and Operations network solutions and strategic adherence to all aspects of the Information Assurance (IA) program as stipulated by various U.S. Government requirements including (but not limited to): Director of Central...

  • Information System Security Officer

    13 hours ago

    Washington, United States Booz Allen Full time

    / / Washington / District of Columbia / USA **Information System Security Officer** Washington , District of Columbia , USA **Job Description** **Location:** Washington, District of Columbia, USA **Remote Work:** No **Job Number:** R0121014 Share job via: Share this job: Information System Security Officer**The Challenge**: When our countrys cybersecurity is...

  • Information System Security Officer, ADVISE

    2 days ago

    Washington, United States DevTech Full time

    Overview DevTech is looking for an Information System Security Officer (ISSO) to work as an institutional contractor on its Analytics, Data, Visualization, and Information Services (ADVISE) contract with the United States Agency for International Development (USAID). ADVISE staff comprise much of the USAID Data Services team, led by USAID’s Chief...

  • Information Systems Security Officer

    3 days ago

    Washington, United States Bering Straits Native Corporation (BSNC) Full time

    Overview: Visit our website at www.beringstraits.com to apply! Job specifications are intended to present a descriptive list of the range of duties performed by employees. Specifications are not intended to reflect all duties performed within the job. SUMMARY Bering Global Solutions, LLC, a subsidiary of Bering Straits Native Corporation is currently...

  • Information System Security Officer

    17 hours ago

    Washington, United States HRUCKUS Full time

    Veteran Firm Seeking a Mid-Level Information System Security Officer (ISSO) with a Top Secret Clearance w/ SCI and a CI-Polygraph eligibility for an Onsite Assignment in Washington, DCMy name is Stephen Hrutka, and I lead a Veteran-owned consulting firm in Washington, DC, focused on strategic sourcing, supply chain, and IT Staffing.We are looking to fill a...

  • Information System Security Officer

    1 day ago

    Washington, United States RightDirection Technology Solutions LLC Full time

    RDTS is seeking an experienced Information System Security Officer (ISSO) to provide Systems Assessment and Authorization support to the US Department of the Treasury's Departmental Offices (DO), Office of the Chief Information Officer (OCIO). This position requires both the technical ability to provide independent assessments and plans for current...

  • Information System Security Officer

    1 week ago

    Washington, United States Syntricate Technologies Full time

    Hello Hope you are doing well, My name is Prahlad Gautam from Syntricate Technologies LLC Your experience is relevant to one of my current openings, if you are available, interested, planning to make change, or know of a friend who might have the required qualification and interest, Role: Cloud Information System Security Officer (ISSO) Location:...

  • Information System Security Officer

    1 week ago

    Washington, United States Zonestra Technology LLc Full time

    Hello Hope you are doing well, My name is Prahlad Gautam from Zonestra Technologies LLC Your experience is relevant to one of my current openings, if you are available, interested, planning to make change, or know of a friend who might have the required qualification and interest, Role: Cloud Information System Security Officer (ISSO) Location:...

  • Senior Information System Security Officer

    10 hours ago

    Washington, United States Creative Visions Full time

    **Senior Information System Security Officer** Washington, District of Columbia Minimum Experience **Experienced** Creative Visions is seeking a Sr. Information System Security Officer (ISSO) to support multiple federal agencies through the Continuous Diagnostic& Mitigation (CDM) Program. The CDM Program is a high-profile, high-visibility, cybersecurity...

  • Senior Information Systems Security Officer

    1 week ago

    Washington, United States Bering Straits Native Corporation (BSNC) Full time

    Overview: Visit our website at www.beringstraits.com to apply! Equal Opportunity Employer/Veterans/Disabled SUMMARY Bering Global Solutions, LLC, a subsidiary of Bering Straits Native Corporation is currently seeking a qualified Senior Information Systems Security Officer for a government client in Washington, DC. The selected individual will guide...

  • Senior Information System Security Officer

    2 weeks ago

    Washington, United States Creative Visions Full time

    **Senior Information System Security Officer** Washington, District of Columbia Minimum Experience **Experienced** Creative Visions is seeking a Sr. Information System Security Officer (ISSO) to support multiple federal agencies through the Continuous Diagnostic& Mitigation (CDM) Program. The CDM Program is a high-profile, high-visibility, cybersecurity...

  • Senior Information System Security Officer

    6 hours ago

    Washington, United States Omniscius Consulting Full time

    Job Description Job Description We are seeking a highly experienced Senior Information System Security Officer (ISSO) to lead our information security Compliance Branch to support a homeland security customer in Washington, DC. The ideal candidate will have over 10 years of experience in managing complex systems within our Agency, demonstrating a deep...

  • Information Systems Security Officer

    6 days ago

    Washington, United States TCecure LLC Full time

    Serve as an Information System Security Officer (ISSO) in support of the Authorization of information systems and all related cybersecurity policies and procedures. Lead overall authorization process, to include supporting cybersecurity policy, procedures, and processes. Manage the creation of ATO Packages for systems and enclaves. Manage all Security...