information systems security officer

<div><p>ECS is seeking an <b><i>Information Systems Security Officer </i></b>to work in our <b><i>Fairfax, VA </i></b>office.
</p><p></p><p>ECS is seeking a detail-oriented Information System Security Officer (ISSO) to support cybersecurity operations for U.S. Navy information systems. The ISSO will work under the direction of the ISSM and program leadership to ensure systems meet DoD and Department of the Navy (DON) cybersecurity requirements under the Risk Management Framework (RMF).</p>
<p>
The ideal candidate will have experience supporting Navy systems and maintaining RMF packages in eMASS, with familiarity across Navy environments such as NAVWAR, NAVAIR, NAVSEA, or Fleet Cyber Command.</p>
<p>
</p><ul><li>Support the implementation and maintenance of RMF in accordance with:
<ul><li>DoDI 8510.01 (Risk Management Framework)</li>
<li>DoDI 8500.01 (Cybersecurity)</li>
</ul></li><li>Assist in developing, updating, and maintaining RMF documentation, including:
<ul><li>System Security Plans (SSPs)</li>
<li>Security Control Traceability Matrices (SCTMs)</li>
<li>Plan of Action &amp; Milestones (POA&amp;Ms)</li>
<li>Continuous Monitoring artifacts</li>
</ul></li><li>Implement and validate security controls based on:
<ul><li>NIST SP 800-53 Rev. 5</li>
<li>NIST SP 800-37 Rev. 2</li>
</ul></li><li>Maintain and update system records in eMASS, ensuring accuracy and completeness</li>
<li>Conduct routine security control checks and support formal Security Control Assessments (SCAs)</li>
<li>Perform vulnerability management activities, including:
<ul><li>Running and analyzing ACAS scans</li>
<li>Applying and validating DISA STIGs/SRGs</li>
<li>Tracking remediation actions to closure</li>
</ul></li><li>Monitor system security posture and support continuous monitoring (CONMON) activities</li>
<li>Support incident response efforts in accordance with:
<ul><li>DoDI 8530.01 (Cyber Incident Response)</li>
<li>Navy Cyber Defense Operations processes</li>
</ul></li><li>Assist with audits, inspections, and cybersecurity reviews (e.g., FISMA, DON CIO inspections)</li>
<li>Provide day-to-day cybersecurity support to system administrators, engineers, and developers</li>
<li>Ensure proper configuration management and secure baseline enforcement across systems</li>
</ul>Requirements:
<ul><li><b><i>Active Secret clearance (TS/SCI preferred)</i></b></li>
<li><b><i>Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)</i></b></li>
<li>5&ndash;7+ years of cybersecurity experience, with ISSO or ISSO-support experience in a DoD/Navy environment</li>
<li>Hands-on experience with RMF processes and artifacts</li>
<li>Experience working in eMASS</li>
<li>Working knowledge of:
<ul><li>NIST SP 800-53 Rev. 5 controls</li>
<li>NIST SP 800-37 Rev. 2 (RMF)</li>
<li>DoDI 8500.01 / 8510.01</li>
<li>SECNAV M-5239.1 (DON Cybersecurity Manual)</li>
</ul></li><li>Experience supporting Navy or DoD systems (e.g., NAVWAR, NAVAIR, NAVSEA, USMC)</li>
<li>Familiarity with:
<ul><li>DISA STIGs and compliance tools</li>
<li>ACAS vulnerability scanning</li>
<li>Endpoint security tools (e.g., HBSS/ESS)</li>
</ul></li><li>Must meet DoD 8140 (formerly 8570.01-M) IAT Level II or higher requirements, such as:
<ul><li>Security+ (minimum)</li>
<li>CySA+</li>
<li>SSCP</li>
<li>CASP+ (preferred)</li>
</ul>
</li></ul><br>
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Information Systems Security Officer

P3S Corporation

<p></p><div><p><b>Certifications: IAM Level II Certification (CAP, CASP CE, CISM, CISSP, GSLC)</b></p><p></p><p>
Pay Rate: $28.00 - $30.00 per hour</p><p></p><p><b>
Type: 100% </b>onsite Ellsworth AFB, SD</p><p></p><p><b>
Clearance: </b>TS/SCI</p><p><b>
Minimum Criteria.</b></p><p></p><ul><li>Bachelor&rsquo;s degree from an accredited college in a related discipline, or equivalent experience/combined education. Preferred</li></ul><p></p><ul><li>IAM Level II certification and an active TS/SCI Government Clearance.</li></ul><p></p><ul><li>Knowledge of computer hardware and maintenance of the operating system (OS)/utility software.</li></ul><p></p><p><b>
Location.</b></p><p></p><p>
100% onsite Ellsworth AFB, South Dakota</p><p></p><p><b>
Who We Need:</b></p><p></p><p>
We are looking for a strategic, experienced <b>Information Systems Security Officer</b> at Ellsworth AFB, South Dakota to support the Air Force Financial Service Center that enjoys challenges and thrives in a fast-paced environment. This essential member of our family will provide Data Security Administration management to the Air Force Financial Services, and Information Assurance knowledge to particular tasks. Team Member will interact with internal and external agencies, AFFSO, HAF/IMSC, and AFFSC leadership and assume efforts based on specialized functional experience</p><p>
</p><p>We do not discriminate on the basis of race, sex, color, religion, national origin, age, disability or veteran status in the provision of services or employment opportunities and benefits.</p><p>
</p><p></p><p><b>Responsibilities</b></p><p></p><ul><li>Provide guidance and direction for the physical protection of information systems assets to other functional units.</li></ul><p></p><ul><li>Maintain operational security posture for an information system or program to ensure information systems security policies, Standards, and procedures are established and followed.</li></ul><p></p><ul><li>Assists with the management of security aspects of the information system.</li></ul><p></p><ul><li>Provide configuration management (CM) for information system security software, hardware, and firmware.</li></ul><p></p><ul><li>Manage changes to system and assesses the security impact of those changes.</li></ul><p></p><ul><li>Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Assessment &amp; Authorization (A&amp;A) packages.</li></ul><p></p><ul><li>Ability to learn and apply system security policies, FISMA requirements, regulations, and processes.</li></ul><p></p><ul><li>Apply specialized detailed Air Force Financial Services, and Information Assurance knowledge to a specific task.</li></ul><p></p><ul><li>
Risk Management expert; hands on experience with RMF, eMASS and ITIPS</li><li>
Implement cybersecurity controls and security engineering for enterprise and tactical systems.</li><li>
Address vulnerabilities and maintain product security posture.</li><li>
Review, prepare, and update RMF authorization packages and other security documents as required.</li><li>
Plan and schedule Authority to Operate (ATO) critical path for 1-, 3-, or 5-year accreditations.</li><li>
Conduct assessments of information security controls in order to measure the effectives of controls and identify any gaps.</li><li>
Manage remediation efforts and report on the status of control deficiencies.</li><li>
Provide continuous monitoring security expertise to business units and key stakeholders.</li></ul><p></p><ul><li>Provide timely status updates/reporting on assessments and assigned projects</li></ul><p></p><ul><li>
Assisting with the development of system IA documentation to support certification of compliance to applicable standards including RMF.</li><li>
Ensuring the uninterrupted delivery of information technology systems</li><li>
Maintaining and supporting current and ongoing A&amp;A packages</li><li>
Implementing and supporting cyber security standards to include NIST and Risk Management Framework (RMF) A&amp;A Standards</li><li>
Working with systems owners, government managers, and other stakeholders to manage cyber security requirements.</li><li>
Performing regular systems security scans, and maintaining records of such scans, as required by A&amp;A guidelines.</li><li>
Responding to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address systems vulnerabilities.</li><li>
Reviewing systems security utilization logs per cyber security standards</li><li>
Reviewing and evaluating information technology software, hardware and networks and the overall cyber security posture of information technology systems</li></ul><p></p><p><b>
Special Requirements/Skills:</b></p><p></p><ul><li>Must possess creative and intellectual knowledge of the information technology areas in use at Ellsworth AFB, South Dakota, and demonstrate the ability to exercise discretion and independent judgment in working directly with the customers on a daily basis.</li></ul><p></p><ul><li>Must possess the skills, knowledge, and experience required for the Financial Management role and act as an Information Systems Security Officer for the FM Workflow system.</li></ul><p></p><ul><li>Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction.</li></ul><p></p><ul><li>Ability to pass any background, drug, and security checks as required by the Company and / or Government.</li></ul></div><p></p>

MTSI

<div><div>Experienced Information Systems Security Officer (ISSO) who will be responsible for maintaining compliance with applicable security regulations.</div><div>
Seasoned professional in the job family; full competence in technical area. Manages program and project implementation and makes significant contributions to department goals and planning efforts. Knows when to escalate problems/questions to a higher level. Works with customers.</div><div></div><div><br>
The job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change, or new ones may be assigned at any time with or without notice.</div><div></div><div><br>
Please Note: U.S. Citizenship is required.</div><div></div><div><br>
ROLE AND RESPONSIBILITIES:</div><div></div><div><br>
Responsibilities and duties may include, but are not limited to:</div><ul><li>
Perform day-to-day maintenance of systems, including auditing and patch management</li><li>
Perform technical security assessments of complex systems</li><li>
Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies</li><li>
Apply knowledge of IA policy, procedures, and workforce structure to implement secure networking, computing, and enclave environments</li><li>
Write authorization and accreditation (A&amp;A) documentation and ensure the systems are operated and maintained in accordance with these security plans</li><li>
Enforce the design and implementation of trusted relationships among external systems and architectures</li><li>
Support security planning, assessment, risk analysis, and risk management for client systems and programs</li><li>
Interact with technical team members from multiple organizations in a diversified, team environment</li><li>
Identify overall security requirements for the proper handling of MTSI and client data</li><li>
Perform system or network designs that encompass multiple enclaves to include those with differing data protection/classification requirements</li><li>
Recommend system-level solutions to resolve security requirements</li><li>
Ensure all users have the requisite security clearances, authorizations, need-to-know, and are aware of their security responsibilities before granting access to client systems</li><li>
Conduct periodic reviews of information systems to ensure compliance with the security authorization package</li><li>
Perform key functions (above) and other security-related tasks as directed on multiple systems, at multiple sites, or for multiple clients</li><li>
Schedule, perform and maintain records of required IS auditing, patching, maintenance, software/hardware changes, and scanning based on evolving threat/vulnerabilities and customer compliance requirements</li><li>
Assess changes to an information system by performing periodic self-inspections, tests, and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed; ensure corrective actions are taken for identified findings and vulnerabilities</li><li>
Maintain a working knowledge of information system functions, security policies, technical security safeguards, and operational security measures</li><li>
Coordinate with Information Systems Security Manager, Facility Security Officer (FSO) and Contractor Program Security Officers (CPSO) to define, implement and maintain information security policies, strategies, and procedures</li><li>
Implement policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents</li><li>
Receive direction/guidance from the MTSI Program Manager and/or Govt technical lead; translate guidance into actionable tasks performed by the project team</li><li>
Manage/execute medium-large tech tasks</li><li>
Ensures assigned tech tasks are properly coordinated/ efficiently accomplished w/best available resources</li><li>
Serve as technical lead for time critical tech projects, test events/tasks requiring senior level tech expertise</li><li>
Ensure all required resources (e.g. personnel, HW, SW, facilities, security) are identified to support assigned tasks</li><li>
Coordinate w/Project Manager to verify time phased requirements are identified to meet contractual required deadlines</li><li>
Accountable for the quality and timely delivery of all technical contract deliverables</li><li>
Ensure that task related products are consistent in format and content with overall project deliverables</li><li>
Routinely engage with Govt technical representative + tech leads for our teammates and subcontractors</li><li>
Acts as a resource/mentor for colleagues with less experience</li><li>
Works independently, with guidance in only the most complex situations</li></ul><div></div><div><br>
REQUIRED SKILLS:</div><br>
<div></div><ul><li>
Knowledge of federal security requirements and mandates (e.g., RMF, JSIG, FIPS, NIST)</li><li>
Strong Microsoft Windows background with some knowledge of UNIX/LINUX</li><li>
Familiarity with security procedures in a SCIF/SAPF environment</li><li>
Proficiency in multiple technical areas and application of advanced technical/analytical principles</li><li>
Ability to understand customer needs and translate them into technical solutions</li><li>
Experience in overseeing technical studies, complex analysis, and generating reports/presentations</li><li>
Project management or program management knowledge and experience</li><li>
Strong problem-solving skills, including breaking down complex problems and prioritizing tasks</li><li>
Excellent communication skills and ability to interface with senior-level customers and teammates</li><li>
Leadership experience in technical projects, proposals, and internal committees or innovation projects</li></ul><div></div><div><br>
REQUIRED COMPETENCIES:</div><div></div><div><br>
All MTSI employees are required to be skilled in the following core competencies:</div><ul><li>
Collaboration/Teamwork: Engages others across roles through communication and mutual respect, shares insights, enabling effective teamwork to ensure collective success. (teamwork)</li><li>
Technical and Functional Skills: Leverages technical and functional expertise to deliver high performance, addresses challenges, and supports business needs while pursuing continuous skill development. (domain knowledge)</li><li>
Entrepreneurialism: Fosters innovation, evaluates ideas, and advances initiatives with sound judgment and organizational awareness to drive growth and impact. (innovation)</li><li>
Communication: Communicates clearly and effectively, fostering understanding, collaboration, and alignment through active listening and impactful messaging. (effective communication)</li><li>
Customer Focus: Prioritizes customer needs, builds trust, and delivers exceptional service by using insights to drive improvements and strengthen relationships. (customer insight)</li></ul><div></div><div><br>
QUALIFICATIONS:</div><div></div><ul><li><ul><li><br>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Information Security, or related field</li></ul></li><li>
Five (5) years of experience working in an IA-related field and/or five (5) to eight (8) years of experience in IT with a heavy emphasis on systems administration</li><li>
In-depth knowledge of Microsoft Windows OS (client and server)</li><li>
CompTIA Security+ or higher-level DoD 8570.01/8140.03 certification</li><li>
Experience with Linux operating system (RedHat Enterprise Linux)</li><li>
Experience with XACTA-Experience using security hardening, collection, and assessment tools (e.g. SCC, Nessus, Splunk, etc.)</li><li>
Experience with security architectures, firewalls, and network access</li><li>
Experience with risk managed downloads, information systems sanitization and destruction, PEDs, contaminations, incident response, virus scanning, privileged user access, and hardware/software configuration management</li><li>
Experience with A&amp;A documentation and system authorization artifacts</li><li>
Frequent sitting for long periods using computer keyboard, zoom conferencing, Microsoft teams, telephone etc.</li><li>
Regular standing and walking to file documents, make copies, meet with leaders/employees in other parts of the building etc.</li><li>
Keyboarding: Entering text or data into a computer or other machine by means of a traditional keyboard (traditional keyboard refers to a panel of keys used as the primary input device on a computer, typographic machine, or 10-key numeric keypad)</li><li>
Work is performed in an office environment and requires the ability to operate standard office equipment</li><li>
Some work (less than 5%) may require moving and lifting of heavy objects</li></ul><div></div><div><br>
#LI-BG1</div></div>
<br>
TS/SCI
<br>
<div><h1 class="jobSectionHeader"><b>Perks and Benefits</b></h1><ul><li><div><div><i>
Vacation:</i></div><div>
New Hires Accrue 20 days of PTO and 10 Holidays per Year</div></div></li><li><div><div><i>
Health Insurance:</i></div><div>
Zero Deductible Health Plans</div></div></li><li><div><div><i>
Flexible Schedules:</i></div><div>
Flex Schedules</div></div></li><li><div><div><i>
Professional Development:</i></div><div>
Up to $10,000 Annual Education/Training Reimbursement
</div></div></li><li><div><div><i>ESOP:</i></div><div>
Funded Stock Ownership Plan</div></div></li><li><div><div><i>
401k Match+:</i></div><div>
6% 401k Match + Immediate Vesting
</div></div></li><li><div><div><i>Bonus Program:</i></div><div>
Semi-Annual Bonus Opportunity
</div></div></li><li><div><div><i>Mentorship:</i></div><div>
Career Mentorship Programs
</div></div></li></ul><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul><li><div><div><i>
Interesting Work:</i></div><div>
Our co-workers support some of the most important and critical programs to our national defense and security.</div></div></li><li><div><div><i>
Values:</i></div><div>
Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.</div></div></li><li><div><div><i>
100% Employee Owned:</i></div><div>
We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.</div></div></li><li><div><div><i>
Great Benefits - Most Full-Time Staff Are Eligible for:</i></div></div></li><li><ul><li><div>
Starting PTO accrual of 20 days PTO/year + 10 holidays/year</div></li><li><div>
Flexible schedules</div></li><li><div>
6% 401k match with immediate vesting up to $9k annually</div></li><li><div>
Semi-annual bonus eligibility (July and Decemeber)</div></li><li><div>
Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account</div></li><li><div>
Up to $10,000 in annual educational reimbursement</div></li><li><div>
Other company funded benefits, like life and disability insurance</div></li><li><div>
Optional zero deductible Blue Cross/Blue Shield health insurance plan</div></li></ul></li><li><div><div><i>
Track Record of Success:</i></div><div>
We have grown every year since our founding in 1993.
</div></div></li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p><p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p><p>
For more information about MTSI, please visitwww.mtsi-va.com</p><h4 class="jobSectionHeader"><b>
EEO Statement</b></h4><div><div><div><p>
MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.</p></div></div></div></div>
<br>
<div><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul>
<li><b>Interesting Work: </b>Our co-workers support some of the most important and critical programs to our national defense and security.
</li><li><b>Values: </b>Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
</li><li><b>100% Employee Owned: </b>We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
</li><li><b>Great Benefits - Most Full-Time Staff Are Eligible for:
</b></li><li><ul><li>Starting PTO accrual of 20 days PTO/year + 10 holidays/year
</li><li>Flexible schedules
</li><li>6% 401k match with immediate vesting up to $9k annually
</li><li>Semi-annual bonus eligibility (July and Decemeber)
</li><li>Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
</li><li>Up to $10,000 in annual educational reimbursement
</li><li>Other company funded benefits, like life and disability insurance
</li><li>Optional zero deductible Blue Cross/Blue Shield health insurance plan
</li></ul></li><li><b>Track Record of Success: </b>We have grown every year since our founding in 1993.
</li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p>
<p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p>
<p>
For more information about MTSI, please visit www.mtsi-va.com</p></div>

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><div>
Information Security Analyst Senior<br>
<br>
Transform technology into opportunity as an Information Security Analyst Senior with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you&rsquo;ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.<br>
<br>
At GDIT, people are our differentiator. As an Information Security Analyst Senior you will help ensure today is safe and tomorrow is smarter. Our work depends on Information Security Analyst Senior joining our team to<br>
<br>
HOW AN INFORMATION SECURITY ANALYST SENIOR WILL MAKE AN IMPACT<br>
<ul><li>Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction</li></ul><br>
WHAT YOU&rsquo;LL NEED TO SUCCEED:<br>
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>TS/SCI with CI Polygraph</li><li>3+ years of related experience</li><li>IAT Level I2, IAT Level II2, or IAT Level III (prefer Security+ or CISSP)</li><li>Information Systems Security Officer (ISSO) per DoD 8140 requirements.</li><li>Travel: &lt;25%</li><li>On Customer Site</li><li>US Citizenship Required</li></ul><br>
GDIT IS YOUR PLACE:<br>
<br>
<ul><li>401K with company match</li><li>Comprehensive health and wellness packages</li><li>Internal mobility team dedicated to helping you own your career</li><li>Professional growth opportunities including paid education and certifications</li><li>Cutting-edge technology you can learn from</li><li>Rest and recharge with paid vacation and holidays</li></ul></div>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
3 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $97,750 - $132,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Information Systems Security Officer (ISSO)

AMERICAN SYSTEMS

<div>Overview:
<div>
AMERICAN SYSTEMS, a <b>100% employee-owned</b> company, is on the hunt for a highly experienced <b>Information Systems Security Officer</b> with demonstrated experience in risk management oversight &amp; assessment to join our Cybersecurity team in <b>Dallas, Texas</b>!</div>
Responsibilities:
<div>
As an <b>Information Systems Security Officer</b> with AMERICAN SYSTEMS supporting the <b>Security Control Assessor (SCA)</b>, you will:</div><ul><li>
Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.</li><li>
Develop specifications to ensure risk, compliance, and assurance efforts conform with security, resilience, and dependability requirements at software application, system, and network levels.</li><li>
Verify application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.</li><li>
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.</li><li>
Assess the effectiveness of security controls.</li><li>
Develop methods to monitor and measure risk, compliance, and assurance efforts.</li><li>
Draft statements of preliminary or residual security risks for system operation.</li><li>
Monitor and evaluate a system's compliance with information technology (IT) security, resilience, and dependability requirements.</li><li>
Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.</li><li>
Maintain information systems assurance and accreditation materials.</li><li>
Support site assistance visits (SAV)s as requested by the Security Control Assessor (SCA).</li></ul>
Qualifications:
<ul><li>Active Top Secret with SAP eligibility</li><li>
Bachelor's degree in related discipline (<i>or 4 additional years of relevant experience in lieu of degree</i>)</li><li>
10-12 years of relevant experience</li><li>
DoD 8570 IAM III level certification (<i>g., CISSP, CISM, GSLC, or CCISO</i>) <b>or</b><ul><li>
DoD 8140 Advanced ISSM (<i>g., CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP-ISSMP, CISSP</i>) <b>or</b></li><li>
DoD 8140 Advanced SCA (<i>g., CISM, CISSO, CPTE, CySA+, FITSP-A, GCSA , CISA or CISSP, CISSP-ISSEP, GSLC, GSNA</i>)</li></ul></li><li>
Expert knowledge of:<ul><li>
Navy FLTCYBERCOM Authorization processes
</li><li>GRC Experience (eMASS\Xacta)</li><li>
Risk Management Framework requirements</li><li>
Cybersecurity (CS) principles and organizational requirements relevant to confidentiality, integrity, availability, authentication, and non-repudiation
</li><li>Information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
</li><li>Network security architecture concepts including topology, protocols, components, and principles.</li><li>
Security Assessment and Authorization process</li><li>
Cyber defense and vulnerability assessment tools, including open-source tools, and their capabilities.</li><li>
Penetration testing principles, tools, and techniques.</li><li>
Relevant laws, policies, procedures, or governance related to critical infrastructure.</li></ul></li><li>
Skilled in:<ul><li>
Discerning protection needs (i.e., security controls) of information systems and networks.</li><li>
Determining how a security system should work and how changes in conditions, operations, or the environment will affect outcomes.</li></ul></li></ul>
Pay Transparency Statement: AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $155,700.00/Yr. - USD $260,000.00/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Statement: EEO Race/Sex/Disability Status/Veteran Status</div>

Information Systems Security Officer (SCAR)

Koniag Government Services

Arlluk Technology Solutions, LLC a Koniag Government Services company, is seeking an Information Systems Security Officer (ISSO) with a Secret security clearance to support ATS and our government customer. The position is remote.
<br><br>
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
<br><br>
Koniag Government Services is seeking an experienced Information Systems Security Officer (ISSO) to support and maintain the security posture of critical Department of War (DOW) information systems. The ideal candidate will be a detail-oriented professional with extensive expertise in the DOD Risk Management Framework (RMF), DISA regulations, and STIG compliance. This role involves working closely with government stakeholders to manage vulnerabilities via ACAS and HBSS, maintain Authority to Operate (ATO) accreditations, and develop comprehensive security documentation. The successful candidate will possess strong analytical skills and the ability to ensure continuous cybersecurity compliance within a fast-paced, mission-critical environment.
<br><br>
The Information Systems Security Officer will be responsible for maintaining the security posture of multiple DOW information systems and ensuring compliance with all applicable cybersecurity frameworks and regulations. Principal responsibilities will include but are not limited to:
<br><ul>
<li>Develop and maintain System Administration Documentation that maps interdependencies and critical paths for successful system refreshes, working closely with government stakeholders to identify agency interdependencies</li>
<li>Create and update Configuration and Architecture Diagrams in relation to critical paths and system interdependencies</li>
<li>Provide comprehensive RMF documentation to the ISSM in accordance with DOD accreditation processes</li>
<li>Verify compliance with STIG, DISA Chief Technology Office (CTO), and INFOCON guidelines and requirements</li>
<li>Validate security postures and update findings for assigned databases based on Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) reports and logs</li>
<li>Adhere to CYBERCOM Information Assurance Vulnerability Alerts (IAVAs) by applying required patches and maintaining Plan of Action and Milestones (POA&M) documentation</li>
<li>Conduct STIG Checklist reviews and provide detailed reports of all findings in accordance with RMF frequency requirements</li>
<li>Generate monthly Cybersecurity Reports containing patch schedules for all servers, accreditation status, POA&M status, IAVA status, ACAS scan remediation status, and DISA CTO compliance status</li>
<li>Develop system and cybersecurity policies and plans to identify and respond to threats in compliance with DOW and DISA regulations</li>
<li>Audit access controls and permissions for CSS, COPS, and FABS systems in accordance with DOW and DISA compliance requirements</li>
<li>Provide incident response and recovery support as necessary</li>
<li>Support obtaining and maintaining Authority to Operate (ATO) accreditations for CSS and COPS/FABS systems</li>
<li>Maintain security posture for CSS, COPS/FABS, and EDMS systems</li>
<li>Support DISA ISSO/ISSM with security information to respond to taskers and emerging cybersecurity requirements</li>
<li>Support development and maintenance of Incident Response Plans (IRPs) and Continuity of Operations Plans (COOPs)</li>
<li>Interpret, plan for, prioritize, and implement actions necessary to maintain compliance with DOD and DISA cybersecurity requirements</li>
</ul>
<b>Education and Experience:</b><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field from an accredited college or university</li>
<li>5+ years of experience as an ISSO supporting DOW information systems</li>
<li>Current DOD 8570.01-M IAT Level II or IAM Level II certification (CISSP, CISM, or CAP certification)</li>
<li>Experience working within the Risk Management Framework (RMF)</li>
</ul>
<b>Clearance Requirement:</b><br>
<ul>
<li>Active Secret security clearance</li>
</ul>
<b>Required Skills and Competencies:</b><br>
<ul>
<li>Comprehensive knowledge of DOD Risk Management Framework (RMF) and accreditation processes</li>
<li>Expertise in Security Technical Implementation Guides (STIGs) and STIG compliance verification</li>
<li>Proficiency with ACAS (Nessus) scanning tools and vulnerability management</li>
<li>Experience with Host Based Security System (HBSS) including ePO administration</li>
<li>Strong understanding of DISA CTO requirements and INFOCON procedures</li>
<li>Knowledge of CYBERCOM IAVAs and patch management processes</li>
<li>Ability to develop and maintain POA&Ms and track remediation efforts</li>
<li>Experience creating technical documentation including system architecture diagrams and security plans</li>
<li>Proficiency in conducting security assessments and audits</li>
<li>Knowledge of access control principles and implementation</li>
<li>Understanding of incident response procedures and recovery operations</li>
<li>Familiarity with ATO processes and requirements</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Excellent written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
<li>Strong attention to detail and organizational skills</li>
<li>Ability to manage multiple priorities and meet strict deadlines</li>
</ul>
Our Equal Employment Opportunity Policy
<br>The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
<br>The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
<br><br>
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
<br><br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Information Systems Security Officer (REMOTE)

IPT Associates

<div><p><b>Information Systems Security Officer (ISSO) (Junior)</b></p><p><b>
Redstone Arsenal/Huntsville, AL</b></p><p><br>
IPT Associates (IPTA) is passionate about providing our customers with technical solutions that satisfy their business needs. Through collaborative interactions with customers, team members, subject matter experts (SMEs), technical leaders, and partners we design practical solutions that solve real problems for major government and business organizations. As a member of our Aviation and Missile Center (AvMC) Team, you will work with a team of technologists focused on delivering innovative business solutions using emerging technologies through proven successful methods.</p><p><b><br>
Our Team:</b></p><p><br>
IPTA seeks talented people who are enthusiastic about applying technology to deliver innovative outcomes with &quot;fierce determination, fearless integrity, and passionate service.&quot; Our belief is that our people are the key to success. By encouraging and enabling continued learning, our team members grow to achieve their personal career goals. We are looking for:</p><br>
<ul><li>
Smart people with a passion for technology</li><li>
Ability to solve challenging technical business problems</li><li>
Self-directed professionals</li><li>
Hunger to continually learn and grow</li></ul><p><b><br>
Job Description:</b></p><p><br>
Manage classified and unclassified systems through the AssessmentAuthorization (A&amp;A) process, performing the steps of Risk Management Framework in accordance with NIST SP 800-37r2. Coordination with Information System Owners (ISOs) to complete system categorization, select security controls, and perform self-assessments. Utilize the (RMF) Enterprise Mission Assurance Support Service (eMASS) to create packages, upload artifacts, select security controls, and produce implementation plans. Research, develop, implement, test, and review an organization's information security to protect information systems. Identify organization project's risks, prioritize those risks, mitigate risk, and present unmitigated risks to leadership. Research and present the information necessary to maintain security through risk mitigation. Review systems to identify potential security weaknesses, recommend improvements, implement and document changes.</p><p><b><br>
Responsibilities:</b></p><br>
<ul><li>
Produce eMASS documentation</li><li>
Auditing and reporting of FISMA and NIST 800-53 compliance (cybersecurity compliance)</li><li>
Prepare documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework)</li><li>
RMF package development and review</li><li>
Risk and vulnerability self-assessments and corrective actions</li><li>
Provide assessment and authorization (A&amp;A) support in the development of security and contingency plans</li><li>
Continuous monitoring and reporting of cyber threats, vulnerabilities, and risks</li></ul><p><b><br>
Requirements:</b></p><ul><li>
Bachelor's degree in a related field</li><li>
Three (3) years of prior experience in a similar role</li><li>
Strong communication and organizational skills</li><li>
DoD 8570 Level II/III certification desired</li><li>
Active Security clearance required</li></ul><p><br>
IPTA is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment opportunity to all qualified employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, sexual orientation, national origin, age, physical disability, mental disability, medical condition, status as a veteran or disabled veteran or any other characteristic protected by law. We base all employment decisions, including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, returns from lay-off, terminations, and social and recreational programs on the principles of equal employment opportunity.</p><p><br>
#clearance</p></div>

Information Systems Security Officer (ISSO) (Junior)

Search 10000+ Information systems security officer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 information systems security officer jobs Near Me

Information Systems Security Officer

Information Systems Security Officer

Information Systems Security Officer

Information Systems Security Officer (ISSO)

Information Systems Security Officer (SCAR)

Information Systems Security Officer (REMOTE)

Information Systems Security Officer (ISSO) (Junior)