HPE Information System Security Officer

Command Cyber Solutions, LLC; Ogden (UT); On-site; USD 120,000 - 150,000; Full time

Job summary

Command Cyber Solutions, LLC seeks a senior cybersecurity professional to lead RMF/ATO activities for HPE GreenLake migrations and cloud-security initiatives. You will validate system categorization, data classifications, and regulatory requirements while identifying risks and compliance gaps that affect migration sequencing.

You will develop and enforce security-by-design principles, work on Zero Trust integration, IAM, logging, continuous monitoring, and SIEM capabilities, and support the

Qualifications

• Bachelor's degree with 5+ years in information security, RMF, vulnerability management, cloud security, or related field (Master's +2 years may substitute).
• Active Secret clearance required.
• Experience with RMF assessment, ATO processes, vulnerability mgmt, STIGs, and cloud-security architecture.

Responsibilities

• Lead RMF/ATO activities and security-architecture planning for cloud migrations.
• Assess hosted systems for RMF compliance and ATO readiness.
• Develop cybersecurity requirements for Zero Trust, IAM, SIEM, logging, and continuous monitoring.
• Support creation of risk-mitigation roadmaps and authorization packages for cloud ops.
• Advise Government personnel on cybersecurity implications of modernization decisions.
• Perform vulnerability management, STIG evaluations, and patching coordination.

Skills

RMF ATO

Cloud security

Zero Trust

IAM

SIEM

Vulnerability management

eMASS

STIGs

Risk management

Cybersecurity training

Education

Bachelor's Degree in Business, IT, Cybersecurity

Tools

eMASS

ACAS

STIG checklists

Job description

• Lead cybersecurity planning and security architecture integration for the HPE GreenLake implementation.
• Assess all hosted systems for RMF compliance, authorization to operate (ATO) status, security-control implementation, and cloud-migration readiness.
• Validate system categorization, impact levels, data classifications, and applicable regulatory requirements.
• Identify cybersecurity risks, vulnerabilities, and compliance gaps that could affect migration sequencing and operational readiness.
• Develop cybersecurity requirements for integration with Zero Trust architecture, identity and access management, logging, continuous monitoring, and security information and event management (SIEM) capabilities.
• Ensure migration strategies incorporate security-by-design principles and applicable Department of War and Department of the Air Force cybersecurity policies.
• Support development of security implementation roadmaps, risk-mitigation strategies, and authorization packages necessary for cloud operations.
• Advise Government personnel on cybersecurity implications of modernization decisions and provide recommendations to maintain mission assurance throughout implementation and migration activities.
• Perform cybersecurity analysis and develop system topologies, data-flow mappings, and security architecture documentation supporting HPE GreenLake migration planning and implementation.
• Perform and assist in vulnerability-management activities, including executing ACAS scans; evaluating scan results; prioritizing findings; mapping remediation actions to affected systems; and supporting reduction of the overall vulnerability posture.
• Evaluate Security Technical Implementation Guides (STIGs) and complete required STIG checklists.
• Manage systems through the complete process of achieving and maintaining ATO in a Department of War/Department of the Air Force environment.
• Perform and support security patching, configuration-compliance validation, and remediation tracking.
• Develop, manage, and update the program risk register in coordination with project management and Government stakeholders.
• Support continuous-monitoring activities, cybersecurity reporting, incident-response coordination, and audit readiness.
• Perform other duties as assigned based on customer requirements.

Essential Duties & Responsibilities

• Lead cybersecurity planning and security architecture integration for the HPE GreenLake implementation.
• Assess all hosted systems for RMF compliance, authorization to operate (ATO) status, security-control implementation, and cloud-migration readiness.
• Validate system categorization, impact levels, data classifications, and applicable regulatory requirements.
• Identify cybersecurity risks, vulnerabilities, and compliance gaps that could affect migration sequencing and operational readiness.
• Develop cybersecurity requirements for integration with Zero Trust architecture, identity and access management, logging, continuous monitoring, and security information and event management (SIEM) capabilities.
• Ensure migration strategies incorporate security-by-design principles and applicable Department of War and Department of the Air Force cybersecurity policies.
• Support development of security implementation roadmaps, risk-mitigation strategies, and authorization packages necessary for cloud operations.
• Advise Government personnel on cybersecurity implications of modernization decisions and provide recommendations to maintain mission assurance throughout implementation and migration activities.
• Perform cybersecurity analysis and develop system topologies, data-flow mappings, and security architecture documentation supporting HPE GreenLake migration planning and implementation.
• Perform and assist in vulnerability-management activities, including executing ACAS scans; evaluating scan results; prioritizing findings; mapping remediation actions to affected systems; and supporting reduction of the overall vulnerability posture.
• Evaluate Security Technical Implementation Guides (STIGs) and complete required STIG checklists.
• Manage systems through the complete process of achieving and maintaining ATO in a Department of War/Department of the Air Force environment.
• Perform and support security patching, configuration-compliance validation, and remediation tracking.
• Develop, manage, and update the program risk register in coordination with project management and Government stakeholders.
• Support continuous-monitoring activities, cybersecurity reporting, incident-response coordination, and audit readiness.
• Perform other duties as assigned based on customer requirements.

Education Required

Education, Certification & Experience Requirements:

• Bachelor's Degree in Business, Information Technology, Cybersecurity, or a related field with five (5) or more years of experience in information security, RMF, vulnerability management, cloud security, or a related field. A Master's Degree and two (2) or more years of relevant experience may be substituted.

Certifications Required

• Security+ CE or IAM/IAT I equivalent
• Active Secret clearance

Experience Required

• Must have relevant Department of the Air Force RMF experience.
• RMF assessment and authorization activities, including development and maintenance of authorization-package artifacts.
• Vulnerability management, including conducting scans and evaluating and prioritizing scan outputs.
• Evaluating STIGs and completing STIG checklists.
• Successfully obtaining or maintaining systems through the complete ATO process.
• Cloud security architecture and migration support, preferably in an HPE GreenLake, hybrid-cloud, or comparable environment.
• Identity, credential, and access management; Zero Trust architecture; logging; continuous monitoring; and SIEM integration.
• Security patching and configuration management.
• Experience using eMASS or other related cybersecurity governance, risk, and compliance tools.
• Strong organizational, analytical, problem-solving, written communication, and interpersonal skills.

Knowledge, Skills & Abilities

• Cybersecurity expertise
• RMF ATO, and continuous-monitoring experience
• Cloud-migration and cloud-security experience
• HPE GreenLake or comparable hybrid-cloud environment familiarity
• Zero Trust architecture integration
• Identity and access management
• Security logging, monitoring, and SIEM integration
• Data-center security
• Security policies and procedures
• Security frameworks and standards
• Vulnerability management and compliance auditing
• Security monitoring and incident response
• Risk management
• Cybersecurity training and awareness
• Vendor security assessment
• Security incident investigation
• Project-management coordination
• Effective communication with Government, technical, and program-management stakeholders

Command Cyber Solutions, LLC is an equal opportunity employer. Command Cyber solutions, LLC does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age, disability, marital status or any other characteristic protected by law.