Information Systems Security Officer

Who you are

• Ability to lawfully access information and technology that is subject to US export controls
• BS in Cybersecurity or related technical field with 3+ years of relevant industry experience (5+ years’ experience in lieu of degree)
• Expertise in Change Management
• Professional experience in a Security Operations Center (SOC) or similar environment offering cybersecurity services
• Strong problem-solving skills with the ability to troubleshoot security issues and provide user support
• Excellent communication and interpersonal skills
• Flexibility and willingness to work overtime, including weekends and overnight as needed
• At least one DoD baseline security certification, such as CISSP, Sec+, A+Sec, OR the ability to rapidly receive such certification
• Experience working in DoD classified operating environments
• Experience interpreting, implementing, and assessing DISA STIGs
• Certified Information Security Manager (CISM) | ISACA
• Project management experience with the capacity to manage multiple projects and meet deadlines under pressure
• Professional technical leadership in a security operations center (SOC) or similar cybersecurity service

What the job involves

• We are looking for an Information Systems Security Officer with experience in assessment and governance in a federal contractor environment
• This role is hands-on and you will serve as the “face” of the Information Security program in the Classified and Controlled Unclassified Information systems to both internal and external stakeholders (e.g. customer, regulatory, government and supplier entities)
• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements such as NIST 800-53 and determine applicability to respective programs
• Ensure compliance with existing regulatory, policy, and contractual requirements as they pertain to Divergent classified and unclassified information systems
• Plan, prepare for, schedule and coordinate audits, assessments, and tests
• Assist the ISSM and other members of the IT Security team to understand key stakeholders’ needs and provide solutions to meet contractual obligations
• Provide expert knowledge of Rapid7, SIEM and other security tools
• Provide expert knowledge of Atlassian, eMASS, and other GRC tools
• Guide and mentor Program teams
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation
• Build and maintain positive relationships with internal stakeholders, contractual partners, and government customers