Information Security Manager III

castaliasystems; Arlington (VA); On-site; USD 102,000 - 108,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401k matching

Generous PTO

Paid holidays

Professional training opportunities

Pet insurance

Job summary

Castalia Systems seeks an Information Systems Security Specialist to support the Hunt and Incident Response Team (HIRT) protecting the Nation’s cyber and communications infrastructure. The role is onsite in Arlington, VA, requiring Active TS/SCI with DHS Suitability eligibility and U.S. citizenship.

The candidate will work with ISSM and CISO across RMF-based security programs, manage risk analyses, and coordinate security controls for lab and field deployments to meet ATO requirements.

Qualifications

• Bachelor's degree in Information Management, Cybersecurity, or CS, or HS diploma with 7+ years of information security management experience.
• 5+ years of directly relevant information security management experience.
• Hands-on Linux or AWS experience.
• Experience with RMF process and full ATO lifecycle.
• Knowledge of RMF and A&A documentation (SSP, Contingency, Configuration).

Responsibilities

• Manage the full RMF lifecycle for IT systems as part of a team of IA professionals.
• Assist leadership on major tasks or technology assignments.
• Establish goals and plans meeting project objectives.
• Ensure security requirements are met through control implementation and staffing.
• Interface with senior management during client negotiations and reviews.
• Support decision making with domain knowledge impacting project success.
• Plan, coordinate, and implement lab information security measures.

Skills

Information security management

RMF / A&A process

Linux / AWS

CND policies & network security

Stakeholder interfacing

Team collaboration

Education

BS Information Management / Cybersecurity / CS

HS Diploma + 7+ years information security experience

Tools

Nessus

Xacta

CSAM

RegScale

Job description

Job Type: Full time

Workplace Type: Onsite in Arlington, VA

Clearance: Active TS/SCI with ability to get a DHS Suitability

Must be a U.S. Citizen

Benefits: Medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.

Job Summary

Our customer’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides the customer’s front-line response for cyber incidents and proactively hunting for malicious cyber activity. Our team performs HIRT investigations to develop a preliminary diagnosis of the severity of breaches. Our team provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Castalia Systems is seeking an Information Systems Security Specialist to support this critical customer mission.

Roles and Responsibilities

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems
• Assisting technical/management leadership on major tasks or technology assignments
• Establishing goals and plans that meet project objectives
• Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met
• Participating in client negotiations and interfacing with senior management
• Supporting decision making and domain knowledge that may have a critical impact on overall project implementation
• Providing support to plan, coordinate, and implement a cybersecurity lab’s information security
• Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems
• Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements
• Implementing and development of the DHS IT security standard s
• Gathering and organizing technical information about the lab’s mission goals and needs, existing security products, and ongoing programs
• Performing risk analyses which also includes risk assessment
• Planning and leading major technology assignments
• Evaluating performance results and recommending major changes affecting short-term project growth and success
• Functioning as a cyber technical expert across multiple project assignments
• Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs

Required Qualifications

• BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience.
• 5+ years of directly relevant experience in information security management
• Hands‑on experience with Linux operating systems or Amazon Web Services
• Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management
• Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Management planning and execution
• Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks
• Ability to apply comprehensive knowledge across key tasks and high impact assignments
• Knowledge of Computer Network Defense (CND) policies, procedures & regulations
• Knowledge of defense‑in‑depth principles and network security architecture
• Knowledge of ATO requirements and strong experience with POAMs.
• Knowledge and experience with full range of Microsoft Office products (Word, Excel, PowerPoint, and Visio)
• Knowledge of boundary protection and network segmentation
• Knowledge of authentication and access management techniques
• Experience with implementing and assessing security controls for hardware, software, and network deployments
• Must be able to work collaboratively with internal and external stakeholders across physical locations

Preferred Qualifications

• Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale)
• Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp)
• Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack
• Working knowledge of SIEM tools like Splunk, SOAR, or ELK
• Familiarity with role‑based account processing operations
• Familiarity with zero trust architectures
• Familiarity with scripting languages (Python, AWS CLI, Lambda, Bash, PowerShell)
• Desired Certifications: DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft

Requirements/Work Environment

• Normal office environment.

Travel

• Minimal, less than 10%

Company Description

Castalia Systems is a proven business partner providing mission critical solutions to the Federal Government. We provide cutting edge solutions from Securing and Managing Data to Systems Engineering and Development. Castalia Systems is a pioneer in Artificial Intelligence Design and Application. With our vast knowledge of our customers’ needs and relevant technology, our team is able to bring successful solutions to every mission. We are one‑upping our competitors by providing premium IT solutions and platforms with cutting‑edge technology so it’s so evident when you compare us with anyone.

Compensation

At Castalia Systems, we provide you with opportunities and choices and support your total well‑being. Our benefits include: Medical, dental, vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too. All regularly scheduled employees working at least 30 hours per week are eligible to participate in Castalia Systems’ benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Salary at Castalia Systems is determined by various factors, including but not limited to location, position knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $102,000.00 to $108,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Castalia Systems’ total compensation package for employees.

Disclaimer

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.