1194 - Information Systems Security Officer

Sigma Defense; Maryland; Hybrid; USD 110,000 - 150,000; Full time

Job summary

Sigma Defense is seeking an Information Systems Security Officer to oversee security control implementations and compliance assessments for defense systems. This hybrid role requires significant cybersecurity expertise, a strong background in DoD standards, and an active security clearance. Candidates will manage risk assessment processes and lead vulnerability management activities, contributing to national security efforts while enjoying competitive benefits.

Benefits

Dental and Vision Insurance

Medical Insurance with HSA, FSA, and DFSA Plans

Life and AD&D coverage

Employee Assistance Program (EAP)

401(k) Plan with Company Matching Contributions

160 Hours of Paid Time Off (PTO)

12 (Floating) Holidays

Educational Assistance

Highly Competitive Salary

Qualifications

• 7+ years cybersecurity experience with DoD standards and security frameworks.
• Active DoD Secret security clearance required; TS/SCI preferred.
• Experience in managing information systems compliance and vulnerability management.

Responsibilities

• Implement and maintain security controls in accordance with policies.
• Monitor system compliance and oversee vulnerability management activities.
• Maintain and update site security SOPs and conduct inspections.

Skills

Cybersecurity

Network Systems Engineering

Vulnerability Assessments

Risk Management

Compliance Assessment

Education

Bachelor’s degree in Computer Science, Cybersecurity/Information Management

Tools

ACAS

SCAP Compliance Checker

eMASS

STIG Viewer

Job description

Sigma Defense is seeking an Information Systems Security Officer to serve as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters, technical and otherwise, involving the security of an information system. Responsible for ensuring the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Department of Navy policies. Provide guidance, oversight, and expertise on security control implementation, which may include implementation guidance development and actual control implementation in certain cases under ISSM direction.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

• 7+ years of experience as a cybersecurity professional working with products and tools related to network systems engineering, vulnerability assessments or information systems risk management. (DoD experience is highly desired).
• Experienced in managing information systems under the DoD Risk Management Framework.
• Experienced in applying cybersecurity industry standards and best practices to manage information systems. (NIST Special Publication 800 series, ISO/IEC 27000 family of standards).
• Experienced in the DoD vulnerability management process; and compliance standards such as DISA Security Technical Implementation Guides (STIG) and Security Requirements Guides (SRG), and Common Criteria/National Information Assurance Partnership (NIAP) Protection Profiles.
• Experience in ACAS scans spanning technologies such as RHEL servers, Windows Servers, Cisco IOS and Trellix ENS Host based software.
• DoDM 8570 - IAT Level II (Security + or equivalent).
• Experienced in cybersecurity compliance assessment tools and security information and event management data platforms: Assured Compliance Assessment Solution (ACAS); Security Content Automation Protocol (SCAP) Compliance Checker (SCC); eMASS; STIG Viewer.
• Experience performing as an ISSO and eMASS knowledge.
• Experience with locating fixing and testing issues that result from STIGs.

Preferred Experience:

• Work with high priority classified Risk Management Framework (RMF) Authority to Operate (ATO) Packages for the Marine Patrol and Reconnaissance Aircraft (MPRA) Navy Program Office (PO).

Personnel Clearance Level:

• Candidate must possess an active, DoD issued Secret security clearance.
• Active TS/SCI Clearance is preferred.

Education Requirements:

• Bachelor’s degree from an accredited college or university in Computer Science, Cybersecurity/Information Management, or related field of study is preferred.

Essential Job Duties (not all inclusive):

• This is a hybrid position with on-site requirements two days per week as directed by the TPOC.

• Perform all A&A Configuration Management-related tasks in a thorough, reliable and timely manner for all capabilities under their purview.
• Monitor system compliance utilizing ACAS and other remote monitoring/auditing tools and report to the ISSM.
• Oversee and assist ISSEs in vulnerability management activities.
• Produce comprehensive and accurate quarterly release baselines for systems under their purview.
• Support test and evaluation activities in accordance with USN processes.
• Maintain site security SOPs up to date and perform site inspections and audits as part of Continuous Monitoring.
• Maintain site and system artifacts, to include diagrams.

Salary Range: $110,000- $150,000 annually.

• Dental and Vision Insurance
• Medical Insurance to Include HSA, FSA, and DFSA Plans
• Life and AD&D coverage
• Employee Assistance Program (EAP)
• 401(k) Plan with Company Matching Contributions
• 160 Hours of Paid Time Off (PTO)
• 12 (Floating) Holidays
• Educational Assistance
• Highly Competitive Salary