Information Security System Officer, CMMC

Jobtailor; Denver (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor seeks a qualified information security professional in the Denver area to enforce security policies, uphold NIST SP 800-171 requirements, and coordinate with ISSM, FSO, and admins. You will conduct risk and vulnerability assessments and help prepare both self and external assessments.

The role also involves developing and maintaining an Incident Response Plan and System Security Plans, ensuring artifacts are collected and maintained to support compliance and security posture.

Qualifications

• US Citizenship is required.
• Eligibility for a US Government Security Clearance.
• Bachelor's degree in Information Security, Computer Science, or a related field.
• 2+ years of experience in information security, working with Federal Regulations.
• Strong understanding of NIST SP 800-171, DevSecOps, and security standards.
• Experience with security tools such as SIEM, IDS/IPS, STIG Hardening, and vulnerability management.
• Exposure to Kubernetes, AWS GovCloud, CI/CD pipelines, and secure network architecture.

Responsibilities

• Enforce and maintain information security policies, standards, and procedures.
• Uphold requirements in NIST SP 800-171.
• Coordinate directly with the Quindar ISSM, FSO, System Administrators, Leadership, and the General User community.
• Conduct regular risk assessments and vulnerability assessments.
• Prepare for and execute both self-assessments and external assessments.
• Develop and maintain an Incident Response Plan.
• Maintain System Security Plans and collect all required artifacts.

Skills

Information security

Risk assessment

Vulnerability management

Incident response

Education

Bachelor's degree in Information Security, Computer Science, or a related field

Tools

Kubernetes

AWS GovCloud

CI/CD pipelines

SIEM

IDS/IPS

STIG Hardening

Job description

Responsibilities

• Responsible for enforcing and maintaining information security policies, standards, and procedures.
• Uphold requirements in NIST SP 800-171.
• Coordinate directly with the Quindar ISSM, FSO, System Administrators, Leadership, and the General User community.
• Conduct regular risk assessments and vulnerability assessments.
• Prepare for and execute both self-assessments and external assessments.
• Develop and maintain an Incident Response Plan.
• Maintain System Security Plans and collect all required artifacts.

Requirements

• US Citizenship.
• Eligibility for a US Government Security Clearance.
• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 2+ years of experience in information security, working with Federal Regulations.
• Strong understanding of security frameworks and standards for NIST SP 800-171 and DevSecOps.
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, STIG Hardening, and vulnerability management solutions.
• Exposure to technologies and concepts including Kubernetes Containerization, AWS GovCloud Environments and Tooling, CI/CD pipelines, and Secure Network Architecture.