information systems security specialist

ARMADA Ltd.

<div><p><b>Type:</b> Full Time</p><p><b>
Location:</b> Wright Patterson AFB, OH</p><p><b>
Overtime Exempt: </b>No</p><p><b>
Reports To:</b> ARMADA HQ</p><p><b>
Security Clearance Required:</b> Active Secret Security Clearance</p><p><br>
The F-35 Joint Program Office (F-35 JPO) requires program security support services to support its critical mission of developing, deploying, and sustaining the next generation strike fighter aircraft. The Administrative Security Specialist is responsible for assisting more senior positions and/or performing functional duties under the oversight of more senior positions and shall provide general security support performing activities related to security standard discipline management and support.
</p><p><b>DutiesResponsibilities:</b></p><ul><li>
The Administrative Security Specialist will maintain recall rosters, organizational charts, and contact cards for Security personnel. Maintain, update, and coordinate Security Operations Manuals (SOM), Standard Operating Procedures (SOP), Access Management Control Plan (AMCP), Project Security Instruction (PSI), Continuity of Operations Plan (COOP), Occupant Emergency Plan (OEP), Emergency Action Plan (EAP) and other security-generated publications.</li><li>
The Administrative Security Specialist will schedule and support security meetings.</li><li>
Coordinate with Human Resources (HR) regarding security onboarding/off-boarding.</li><li>
Coordinate onboarding of security new hires.
</li><li>Administrative Security Specialist will coordinate and prepare Security Program Management Reviews (PMRs).</li><li>
Coordinate Security Conference(s) for International Security.</li><li>
Maintain and update security mail groups and calendar.</li><li>
Issue courier cards and provide appropriate courier training.</li><li>
Monitor, control, and service post office box.</li><li>
The Administrative Security Specialist will distribute mail and packages to local security offices.</li><li>
Distribute policy and guidance to CONUS and OCONUS locations as required.</li><li>
Maintain a central security document and file archive.</li><li>
Administrative Security Specialist will maintain, update, and coordinate F-35 security database systems (e.g. Joint Access Database Environment (JADE), Defense Information System for Security (DISS), local databases, SharePoint, central archive, etc.) Provide centralized security customer service support.</li><li>
Provide technical writing support in compliance with appropriate guidance.</li><li>
Assist in development, coordination, and distribution of security policies and procedures.</li><li>
Other duties as assigned.</li></ul><p><b>
Knowledge, Skills and Abilities (KSAs):</b></p><ul><li>
Demonstrated knowledge of aircraft programs and systems.</li><li>
Must have working knowledge of Microsoft Office (Word, PowerPoint and Excel).</li></ul><p><b>
Required Certifications: </b>None</p><p><b>
Minimum/General Experience:</b></p><ul><li>
Active SECRET Security Clearance.</li><li>
Administrative Security Specialist shall have experience with utilizing Joint Access Database Environment (JADE), Defense Information System for Security (DISS), local databases, SharePoint, central archive, etc.</li></ul><p><b>
Minimum Education:</b></p><ul><li>
Bachelor's Degree in the stated discipline or 6 years of additional relevant experience may be substituted for a Bachelor's Degree Or,</li><li>
Associate's Degree plus 4 years of additional relevant experience may be substituted for a Bachelor's Degree.
</li></ul><p><b>Disclaimer:</b></p><p>
The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position.
</p><p><b>Applying: </b>If you feel you have the knowledge, skills and abilities for this position visit our careers page at www.armadausa.com.
</p><p><b>Special Notes:</b> Relocation is not available for these jobs.
</p><p>ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.</p></div>

Jr Level Administrative Security Specialist

GE Aerospace

<div><h1 class="jobSectionHeader"><b>Job Description Summary</b></h1>
Job Description Summary<br>
Provides multi-disciplinary security support for classified government programs in the Military Systems business. Has in-depth knowledge of best practices and how own area integrates with others; has working knowledge of competition and the factors that differentiate them in the market.<p></p><h1 class="jobSectionHeader"><b>
Job Description</b></h1><h2 class="jobSectionHeader"><b>
Job Title</b></h2><p>
Lead Programs Security Specialist (CSSO) &ndash; Evendale</p><h2 class="jobSectionHeader"><b>
Company Intro/About GE Aerospace</b></h2><p>
At GE Aerospace, we push the boundaries of aviation with innovative solutions that are transforming the future of flight. We design, build, and support advanced engines, systems, and technologies for commercial and military customers around the world. Our dedication to excellence, inclusion, and diversity creates a dynamic workplace where employees can thrive, collaborate, and contribute to impactful advancements in aerospace technology.</p><h2 class="jobSectionHeader"><b>
Site, Business, OR Functional Area Overview</b></h2><p>
Join our team at the Evendale, Ohio facility, a flagship GE Aerospace site focused on engineering, production, and support for some of our most advanced programs. At Evendale, we emphasize teamwork, continuous improvement, and professional growth. Our supportive culture offers comprehensive benefits, career development opportunities, and a strong commitment to Safety, Quality, Delivery, and Cost.</p><p>
This role sits within the Site Security function, with a focus on Special Access Program (SAP) security and crisis management across the facility.</p><h2 class="jobSectionHeader"><b>
Role Overview</b></h2><p>
The Lead Programs Security Specialist (CSSO) will serve as the Contractor Special Access Program (SAP) Security Officer at GE Aerospace in Evendale, Ohio. This is a fully on-site role responsible for managing personnel, physical, and information security for Special Access Programs to protect classified information and critical assets.</p><p>
You will lead the implementation and execution of security and crisis management (SCM) practices, ensuring compliance with U.S. Government requirements while delivering a high level of customer service to both internal stakeholders and government partners.</p><p></p><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><div><p><b>
Program &amp; SAP Security Leadership (CSSO)</b>Serve as the CSSO, providing authoritative guidance on NISPOM/32 CFR Part 117, DoDM 5205.07 series, ICDs, JSIG/RMF, and customer-specific security requirements. Manage Special Access Program personnel, physical, and information security to protect classified information in accordance with contractual and regulatory requirements. Coordinate with government customers, support offices, building management, and security/facility managers for facility-related issues, special events, and operating procedures.</p><p><b>
Security Education &amp; Training: </b>Operate and maintain a security education, training, and awareness program, including indoctrinations, annual refresher training, debriefings, and event-specific training. Conduct training sessions for large groups, demonstrating proficient briefing and presentation skills. Promote a strong security culture across the site.</p><p><b>
Personnel Security (PERSEC)</b>Oversee personnel security programs, including security clearance initiation, recertification, and maintenance using personnel security databases (e.g., JADE). Manage visit certifications, visitor reception, escorting, and need-to-know validation. Provide excellent customer support and interpersonal interactions with all levels of the organization.</p><p><b>
Facility &amp; Physical Security: </b>Manage access control, badging, intrusion detection systems, TEMPEST/technical security controls as required, and the maintenance of Fixed Facility Checklists. Support secure facility accreditation and compliance activities, ensuring physical controls meet government and sponsor standards.</p><p><b>
Information &amp; Document Security: </b>Manage an information security program covering the transmission, receipt, storage, distribution, and accountability of classified information and documents. Operate and maintain document control systems and conduct annual inventories. Ensure proper marking, safeguarding, and handling of classified material.</p><p><b>
Cybersecurity: </b>Supports COMSEC accountability by controlling, tracking, and auditing all classified communications materials and cryptographic keys, including receipt, storage, issuance, inventory, and destruction with proper incident reporting. Maintains information system accountability and auditing by approving and managing user accounts, configuring and monitoring security tools and audit logs, and ensuring systems comply with JSIG, RMF, and ATO requirements.</p><p><b>
Incident Management &amp; SCM: </b>Lead reporting, investigations, corrective actions, and closure for security incidents, spillage, and adverse information in accordance with contractual and regulatory timelines. Support broader Security and Crisis Management (SCM) activities to protect assets and employees, contributing to site readiness and resilience.</p><p><b>
Stakeholder Engagement &amp; Communication: </b>Provide clear, professional oral and written communication to employees, leadership, and government stakeholders. Collaborate closely with program teams, site leadership, and security partners to ensure security requirements are understood, integrated, and effectively executed.</p></div><div></div><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><div><p><b>
Education &amp; Experience: </b>Bachelor&rsquo;s degree from an accredited university or college; or high school diploma/GED with at least 4 years of progressively responsible security experience supporting U.S. Government classified programs. Minimum 4 years in Industrial/Special Programs Security, with at least 1 year serving as a CSSO, CPSO, or equivalent lead role on complex SAP/SCI programs.</p><p><b>
Technical Knowledge: </b>Knowledge of NISPOM/32 CFR Part 117, DoDM 5205.07 series, ICDs, JSIG/RMF, and sponsor-specific directives. Demonstrated success supporting secure facility accreditations and classified information system authorizations.</p><p><b>
Clearance: </b>Active/current final DoD Top Secret clearance with the ability to obtain and maintain SCI and SAP access as required by the program.</p><p><b>
Skills &amp; Attributes: </b>Ability to work in a high-tempo environment and manage work under pressure. Demonstrated customer support and interpersonal skills. Excellent oral and written communication skills. Strong problem-solving skills and the ability to analyze and resolve issues effectively. Ability to document, plan, and execute security programs and initiatives. Established project management skills.</p></div><div></div><h2 class="jobSectionHeader"><b>
Closing</b></h2><p>
Joining GE Aerospace as a Lead Programs Security Specialist (CSSO) offers a unique opportunity to safeguard critical technologies and ensure the security and integrity of our classified information at a key GE Aerospace site. You will be part of an innovative and inclusive team dedicated to excellence in the aerospace industry and to the protection of our people, assets, and missions.</p><p>
At GE Aerospace, we are committed to fostering an inclusive workplace that values diversity and empowers employees to thrive.</p><p></p><p><i>
This role requires access to U.S. export-controlled information. Therefore, employment will be contingent upon the ability to prove that you meet the status of a U.S. Person as one of the following: U.S. lawful permanent resident, U.S. Citizen, have been granted asylee or refugee status (i.e., a protected individual under the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)).</i></p><p></p><h1 class="jobSectionHeader"><b>
Additional Information</b></h1><div><div><div><div><div><div><div><p>
GE Aerospace offers a great work environment, professional development, challenging careers, and competitive compensation. GE Aerospace is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.</p></div></div></div></div></div></div></div><p></p><div><div><div><div><div><div><div><p>
GE Aerospace will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
</p></div></div></div></div></div></div></div><p></p><div><div><div><div><div><div><div><p><b>Relocation Assistance Provided: </b>Yes</p></div></div></div></div></div></div></div></div><p></p>

Lead Programs Security Specialist-1

<div><p>ECS is seeking an <b><i>Information Systems Security Officer </i></b>to work in our <b><i>Fairfax, VA </i></b>office.
</p><p></p><p>ECS is seeking a detail-oriented Information System Security Officer (ISSO) to support cybersecurity operations for U.S. Navy information systems. The ISSO will work under the direction of the ISSM and program leadership to ensure systems meet DoD and Department of the Navy (DON) cybersecurity requirements under the Risk Management Framework (RMF).</p>
<p>
The ideal candidate will have experience supporting Navy systems and maintaining RMF packages in eMASS, with familiarity across Navy environments such as NAVWAR, NAVAIR, NAVSEA, or Fleet Cyber Command.</p>
<p>
</p><ul><li>Support the implementation and maintenance of RMF in accordance with:
<ul><li>DoDI 8510.01 (Risk Management Framework)</li>
<li>DoDI 8500.01 (Cybersecurity)</li>
</ul></li><li>Assist in developing, updating, and maintaining RMF documentation, including:
<ul><li>System Security Plans (SSPs)</li>
<li>Security Control Traceability Matrices (SCTMs)</li>
<li>Plan of Action &amp; Milestones (POA&amp;Ms)</li>
<li>Continuous Monitoring artifacts</li>
</ul></li><li>Implement and validate security controls based on:
<ul><li>NIST SP 800-53 Rev. 5</li>
<li>NIST SP 800-37 Rev. 2</li>
</ul></li><li>Maintain and update system records in eMASS, ensuring accuracy and completeness</li>
<li>Conduct routine security control checks and support formal Security Control Assessments (SCAs)</li>
<li>Perform vulnerability management activities, including:
<ul><li>Running and analyzing ACAS scans</li>
<li>Applying and validating DISA STIGs/SRGs</li>
<li>Tracking remediation actions to closure</li>
</ul></li><li>Monitor system security posture and support continuous monitoring (CONMON) activities</li>
<li>Support incident response efforts in accordance with:
<ul><li>DoDI 8530.01 (Cyber Incident Response)</li>
<li>Navy Cyber Defense Operations processes</li>
</ul></li><li>Assist with audits, inspections, and cybersecurity reviews (e.g., FISMA, DON CIO inspections)</li>
<li>Provide day-to-day cybersecurity support to system administrators, engineers, and developers</li>
<li>Ensure proper configuration management and secure baseline enforcement across systems</li>
</ul>Requirements:
<ul><li><b><i>Active Secret clearance (TS/SCI preferred)</i></b></li>
<li><b><i>Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)</i></b></li>
<li>5&ndash;7+ years of cybersecurity experience, with ISSO or ISSO-support experience in a DoD/Navy environment</li>
<li>Hands-on experience with RMF processes and artifacts</li>
<li>Experience working in eMASS</li>
<li>Working knowledge of:
<ul><li>NIST SP 800-53 Rev. 5 controls</li>
<li>NIST SP 800-37 Rev. 2 (RMF)</li>
<li>DoDI 8500.01 / 8510.01</li>
<li>SECNAV M-5239.1 (DON Cybersecurity Manual)</li>
</ul></li><li>Experience supporting Navy or DoD systems (e.g., NAVWAR, NAVAIR, NAVSEA, USMC)</li>
<li>Familiarity with:
<ul><li>DISA STIGs and compliance tools</li>
<li>ACAS vulnerability scanning</li>
<li>Endpoint security tools (e.g., HBSS/ESS)</li>
</ul></li><li>Must meet DoD 8140 (formerly 8570.01-M) IAT Level II or higher requirements, such as:
<ul><li>Security+ (minimum)</li>
<li>CySA+</li>
<li>SSCP</li>
<li>CASP+ (preferred)</li>
</ul>
</li></ul><br>
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Information Systems Security Officer

AMERICAN SYSTEMS

<div>Overview:
<div>
AMERICAN SYSTEMS, a <b>100% employee-owned</b> company, is on the hunt for a highly experienced <b>Information Systems Security Officer</b> with demonstrated experience in risk management oversight &amp; assessment to join our Cybersecurity team in <b>Dallas, Texas</b>!</div>
Responsibilities:
<div>
As an <b>Information Systems Security Officer</b> with AMERICAN SYSTEMS supporting the <b>Security Control Assessor (SCA)</b>, you will:</div><ul><li>
Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.</li><li>
Develop specifications to ensure risk, compliance, and assurance efforts conform with security, resilience, and dependability requirements at software application, system, and network levels.</li><li>
Verify application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.</li><li>
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.</li><li>
Assess the effectiveness of security controls.</li><li>
Develop methods to monitor and measure risk, compliance, and assurance efforts.</li><li>
Draft statements of preliminary or residual security risks for system operation.</li><li>
Monitor and evaluate a system's compliance with information technology (IT) security, resilience, and dependability requirements.</li><li>
Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.</li><li>
Maintain information systems assurance and accreditation materials.</li><li>
Support site assistance visits (SAV)s as requested by the Security Control Assessor (SCA).</li></ul>
Qualifications:
<ul><li>Active Top Secret with SAP eligibility</li><li>
Bachelor's degree in related discipline (<i>or 4 additional years of relevant experience in lieu of degree</i>)</li><li>
10-12 years of relevant experience</li><li>
DoD 8570 IAM III level certification (<i>g., CISSP, CISM, GSLC, or CCISO</i>) <b>or</b><ul><li>
DoD 8140 Advanced ISSM (<i>g., CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP-ISSMP, CISSP</i>) <b>or</b></li><li>
DoD 8140 Advanced SCA (<i>g., CISM, CISSO, CPTE, CySA+, FITSP-A, GCSA , CISA or CISSP, CISSP-ISSEP, GSLC, GSNA</i>)</li></ul></li><li>
Expert knowledge of:<ul><li>
Navy FLTCYBERCOM Authorization processes
</li><li>GRC Experience (eMASS\Xacta)</li><li>
Risk Management Framework requirements</li><li>
Cybersecurity (CS) principles and organizational requirements relevant to confidentiality, integrity, availability, authentication, and non-repudiation
</li><li>Information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
</li><li>Network security architecture concepts including topology, protocols, components, and principles.</li><li>
Security Assessment and Authorization process</li><li>
Cyber defense and vulnerability assessment tools, including open-source tools, and their capabilities.</li><li>
Penetration testing principles, tools, and techniques.</li><li>
Relevant laws, policies, procedures, or governance related to critical infrastructure.</li></ul></li><li>
Skilled in:<ul><li>
Discerning protection needs (i.e., security controls) of information systems and networks.</li><li>
Determining how a security system should work and how changes in conditions, operations, or the environment will affect outcomes.</li></ul></li></ul>
Pay Transparency Statement: AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $155,700.00/Yr. - USD $260,000.00/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Statement: EEO Race/Sex/Disability Status/Veteran Status</div>

Information Systems Security Officer (SCAR)

<div><p><b>Title:</b></p>
Cyber Security Logistics Specialist SME II<p></p><p><b>
Program Summary:</b></p><p>
KBR&rsquo;s Mission Engineering Division delivers complex technical solutions and expert support to the U.S. Department of Defense, specializing in modeling and simulation, cyber transformation, air vehicle mission integration, and lifecycle support. As a trusted partner with a proven history in mission technology, KBR collaborates closely with clients to develop innovative and effective solutions. With a strong ethical framework, KBR prioritizes data security, privacy, and responsible information management to ensure mission success.</p><p></p><p><b>
Job Summary:</b></p><p>
The CyberLOG Specialist SME II will support the cybersecurity initiatives and provide support to the Defense Health Agency (DHA) Risk Management Executive Division.
</p><p></p><p><b>Roles and Responsibilities:</b></p><ul><li>
Reviews and updates the Detailed Architecture Diagram, Detailed Hardware/Software Inventory, and other system artifacts to determine the DoD IT type.</li><li>
Develops the baseline set of impact values (low, moderate, or high) for the medical devices.</li><li>
Identifies common controls associated with the inherited controls in the Security Plan.</li><li>
Documents responsibilities associated with the inherited controls in the Security Plan.</li><li>
Initiates the tailoring process in eMASS to modify the control set to account for conditions affecting the specific system more closely.</li><li>
Adds relevant supplemental security controls and marks extraneous or impertinent controls as &ldquo;Not Applicable&rdquo;.</li><li>
Identifies security controls to be monitored on an ongoing basis.</li><li>
Reviews site/organization change control policies.</li><li>
Documents the method of applying policies to specific controls.</li><li>
Coordinates with the IV&amp;V Team to clarify information required for Special Access Programs.</li><li>
Leads the execution of the self-assessment activities.</li><li>
Completes applicable checklists in assessing the NIST SP 800-53 Revision 4 controls.</li><li>
Documents upload self-assessment checklist results and artifacts documentation in eMASS.</li><li>
Provides support with remediation and mitigation efforts.</li><li>
Creates the Risk Assessment Report.</li><li>
Coordinates with the ISSM to confirm the completion of the Security Authorization Package prior to eMASS submission.</li><li>
Assists program leadership with status reports, white papers, weekly activity report, and other ad hoc requirements as necessary.</li><li>
Performs other job-related duties as assigned</li></ul><p><b><br>
Basic Qualifications:</b></p><ul><li>
Bachelor&rsquo;s Degree in Information Technology or Cybersecurity, or an equivalent combination of education and experience in lieu of a degree.</li><li>
8 years of experience.</li><li>
Federal government contracting experience required</li><li>
Must possess a Security+ or other IAT Level I, II / IAM Level I, II certification.</li><li>
Ability to maintain an Active DoD Secret clearance.</li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li>
Working knowledge of eMASS.</li><li>
Working knowledge of Risk Management Framework.</li><li>
Working knowledge of DHA mission and environment.</li><li>
Working knowledge of DoD Networks.</li><li>
Working knowledge of the DoD orders process.</li><li>
Working knowledge of USCYBERCOMMAND and JFHQ-DODIN Cyber Tasking Orders (CTO).</li><li>
Working knowledge of researching and writing white papers, compliance reports, and assessment reports in support activities for defining policy.</li><li>
Working knowledge of developing briefing materials, administrative, and logistic support.</li><li>
Working knowledge of Microsoft Office Suite.</li><li>
Working knowledge of Combatant Commands.</li><li>
Excellent communication and presentation skills (verbal and written) enabling precise conveyance of information across all customer sections and proper enunciation of the English language.</li><li>
Excellent Senior Leadership and General Officer / Flag Officer (GO/FO) leadership briefing skills.</li><li>
Excellent interpersonal, organizational, and critical thinking/problem solving skills.</li><li>
Ability to be flexible, dependable, and multi-task with evolving priorities.</li><li>
Ability to provide excellent customer service.</li><li>
Ability to sign and abide by a non-disclosure agreement.</li></ul><p></p><p><b>
Work Location: North Charleston, SC or Remote</b></p><p></p><p><b>
Compensation:</b> $107,600 - $161,400 The salary range posted is based on the national average. The offered rate will be based on the selected candidate&rsquo;s location, knowledge, skills, abilities, and/or experience, contract affordability, and in consideration of internal parity.</p><p></p><p><b>
Benefits:</b></p><p>
KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.</p><p></p><p>
Belong, Connect and Grow at KBR<br>
<br>
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.</p><p></p><p>
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</p></div><p></p>

Cyber Security Logistics Specialist SME II

Koniag Government Services

Arlluk Technology Solutions, LLC a Koniag Government Services company, is seeking an Information Systems Security Officer with a Secret security clearance to support ATS and our government customer. This position is remote and part-time.
<br><br>
Koniag Government Services is seeking a Part-Time Information Systems Security Officer (ISSO) to support and maintain the security posture of critical Department of War (DOW) information systems. The ideal candidate will be a detail-oriented professional with extensive expertise in the DOD Risk Management Framework (RMF), DISA regulations, and STIG compliance. Initially supporting one primary program, this role requires flexibility to potentially expand support to additional programs as requirements evolve. The successful candidate will manage vulnerabilities via ACAS and HBSS, maintain Authority to Operate (ATO) accreditations, and possess the strong organizational skills necessary to ensure continuous cybersecurity compliance in a mission-critical, team-based environment.
<br><br>
Essential Functions, Responsibilities & Duties may include, but are not limited to:
<br>The Information Systems Security Officer will be responsible for maintaining the security posture of multiple DOW information systems and ensuring compliance with all applicable cybersecurity frameworks and regulations. Principal responsibilities will include but are not limited to:
<br><ul>
<li>Develop and maintain System Administration Documentation that maps interdependencies and critical paths for successful system refreshes, working closely with government stakeholders to identify agency interdependencies</li>
<li>Create and update Configuration and Architecture Diagrams in relation to critical paths and system interdependencies</li>
<li>Provide comprehensive RMF documentation to the ISSM in accordance with DOD accreditation processes</li>
<li>Verify compliance with STIG, DISA Chief Technology Office (CTO), and INFOCON guidelines and requirements</li>
<li>Validate security postures and update findings for assigned databases based on Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) reports and logs</li>
<li>Adhere to CYBERCOM Information Assurance Vulnerability Alerts (IAVAs) by applying required patches and maintaining Plan of Action and Milestones (POA&M) documentation</li>
<li>Conduct STIG Checklist reviews and provide detailed reports of all findings in accordance with RMF frequency requirements</li>
<li>Generate monthly Cybersecurity Reports containing patch schedules for all servers, accreditation status, POA&M status, IAVA status, ACAS scan remediation status, and DISA CTO compliance status</li>
<li>Develop system and cybersecurity policies and plans to identify and respond to threats in compliance with DOW and DISA regulations</li>
<li>Audit access controls and permissions for CSS, COPS, and FABS systems in accordance with DOW and DISA compliance requirements</li>
<li>Provide incident response and recovery support as necessary</li>
<li>Support obtaining and maintaining Authority to Operate (ATO) accreditations for CSS and COPS/FABS systems</li>
<li>Maintain security posture for CSS, COPS/FABS, and EDMS systems</li>
<li>Support DISA ISSO/ISSM with security information to respond to taskers and emerging cybersecurity requirements</li>
<li>Support development and maintenance of Incident Response Plans (IRPs) and Continuity of Operations Plans (COOPs)</li>
<li>Interpret, plan for, prioritize, and implement actions necessary to maintain compliance with DOD and DISA cybersecurity requirements</li>
</ul>
<b>Education and Experience:</b><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field from an accredited college or university</li>
<li>5+ years of experience as an ISSO supporting DOW information systems</li>
<li>Current DOD 8570.01-M IAT Level II or IAM Level II certification (CISSP, CISM, or CAP certification)</li>
<li>Experience working within the Risk Management Framework (RMF)</li>
</ul>
<b>Clearance Requirement:</b><br>
<ul>
<li>Active Secret security clearance</li>
</ul>
<b>Required Skills and Competencies:</b><br>
<ul>
<li>Comprehensive knowledge of DOD Risk Management Framework (RMF) and accreditation processes</li>
<li>Expertise in Security Technical Implementation Guides (STIGs) and STIG compliance verification</li>
<li>Proficiency with ACAS (Nessus) scanning tools and vulnerability management</li>
<li>Experience with Host Based Security System (HBSS) including ePO administration</li>
<li>Strong understanding of DISA CTO requirements and INFOCON procedures</li>
<li>Knowledge of CYBERCOM IAVAs and patch management processes</li>
<li>Ability to develop and maintain POA&Ms and track remediation efforts</li>
<li>Experience creating technical documentation including system architecture diagrams and security plans</li>
<li>Proficiency in conducting security assessments and audits</li>
<li>Knowledge of access control principles and implementation</li>
<li>Understanding of incident response procedures and recovery operations</li>
<li>Familiarity with ATO processes and requirements</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Excellent written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
<li>Strong attention to detail and organizational skills</li>
<li>Ability to manage multiple priorities and meet strict deadlines</li>
</ul>
Our Equal Employment Opportunity Policy
<br>The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
<br>The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
<br><br>
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
<br><br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Information Systems Security Officer (Part-time, Remote)

LMR Technical Group

<div><p>LMR Technical Group (LMR) is seeking a Specialist, Information System Security I.</p><p></p><p><b><br>
Location:</b> Panama City Beach, FL</p><p></p><p><b><br>
Job Description:</b></p>
<p>
The Specialist, Information System Security I supports all aspects of a Program Information Assurance (IA) process on the PEO Unmanned and Small Combatants (PEO USC) Support Services contract.</p><p></p><p><b><br>
Duties and Responsibilities:</b></p>
<ul>
<li>Responsible for supporting all aspects of a Program Information Assurance (IA) processes tailored to include minimum qualification standards, fundamental awareness and familiarity to demonstrated competency with specific experience in Cyber Security, Engineering, Test &amp; Evaluation, (T&amp;E) and/or Security Control Assessor (SCA) under a Certification &amp; Accreditation (C&amp;A) and/or Assessment &amp; Authorization (A&amp;A) process.</li>
<li>Demonstrate a working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance &amp; Certification Accreditation Process (DIACAP).</li>
<li>Familiarity with security policies &amp; guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements.</li>
<li>Evaluate security solutions to ensure they meet security requirements for processing up to classified information and supervise and/or maintain the operational security posture for an information system or program.</li>
<li>Implement the IT security program and policies supporting the command leadership mission and goals.</li>
<li>Other related duties as assigned.</li></ul><br>
<p></p>
<p><b>
Required Qualifications:</b></p>
<ul>
<li>High school diploma or HS equivalency certificate is acceptable with additional years of experience as defined below.</li>
<li>Security+ Certification.</li>
<li>Current, active Secret security clearance.</li>
<li>2 Years of practical experience in a Cybersecurity, Engineering, T&amp;E or A&amp;A (formerly C&amp;A) related field.</li>
<li>Experience with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) and may be required to hold an Interim Security Control Assessor qualification.</li>
<li>Demonstrated proficiency in Microsoft Office applications (to include MS Word, Excel, PowerPoint, etc.).</li>
<li>Strong attention to detail and organizational skills.</li>
<li>Excellent verbal and written communication skills.</li>
<li>Demonstrated problem-solving skills.</li>
<li>Must possess strong time management skills.</li>
<li>Must be able to work in a fast-paced, changing, and challenging environment.</li>
<li>Must be able to remain seated in a stationary position 50% of the time. Must also be able to alternate between sitting, standing, and walking.</li>
<li>Travel Required ~10% travel required.</li>
<li>Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li>
</ul>
<ul><li>This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required by this position.<br>
</li></ul><p></p><br>
<p>To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><p></p><p><b><br>
Benefits Include:</b></p>
<ul>
<li>Medical, Dental, and Vision Insurance</li>
<li>Life, AD&amp;D, and Short-Term Disability Insurance</li>
<li>401(k)</li>
<li>Paid Time Off</li>
<li>Paid Holidays</li>
<li>Employee Assistance Program</li></ul><br>
<p></p>
<p><b>
About LMR:</b></p>
<p>
LMR is a service-disabled veteran-owned small business that supports technology development and provides comprehensive joint warfighter training by leveraging the skills, experience, and knowledge of its personnel.</p><br>
<p>
LMR Technical Group is an equal opportunity employer and does not discriminate on the basis of any legally protected status or characteristic. Protected veterans and individuals with disabilities are encouraged to apply.</p><br>
<p>
If you are a qualified applicant with a disability in need of an accommodation to complete the application process, please contact us at hr@lmrtec.com. EOE Disability/Veteran.</p><br>
<p></p>
<p>
EEOC Know Your Rights</p>
<p>
E-Verify Participation Poster</p>
<p>
Right to Work Poster</p>
<p>
Employee Polygraph Protection Act Poster</p>
<p>
FMLA Post</p></div><p></p>

Specialist, Information System Security I

Search 10000+ Information systems security specialist jobs near you this April. New roles added regularly across leading industries. Apply today.