Information System Security Manager (ISSM)

Linuxconfig; Cambridge (MA); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

10 paid holidays

Open leave policy

Bonus and stock options

401(k) match

Health, dental, vision and life ins.

Job summary

MORSE Corp in Cambridge, MA seeks an Information System Security Manager (ISSM) to oversee security across classified and unclassified IT environments. You will advise on the security of information systems and coordinate with ISSMs, system and network administrators to maintain compliance with NIST SPs and CMMC.

The role requires 1 year of cybersecurity experience, knowledge of NIST 800-37/800-171, and ACAS/HBSS experience. A Secret clearance with TS preferred.

Qualifications

• 1 year of relevant cybersecurity experience.
• Strong understanding of NIST 800-37, 800-171 (or similar).
• Experience implementing/assessing ACAS and HBSS requirements.
• Security+ CE or DoD IAM Level I equivalent preferred.
• Current Secret clearance with TS preferred.

Responsibilities

• Ensure systems are operated and disposed of per security policies.
• Participate in SDLC to embed security features and safeguards.
• Maintain security architecture (SIEM, vulnerability scanning, DS/IPS).
• Collaborate with ISSMs, System Admins, and Network Admins to stay compliant.
• Draft security policies and procedures and ensure government compliance.
• Test controls, record assessments, and maintain POA&M.
• Perform continuous monitoring as required by NIST 800-37 and CMMC.
• Analyze vulnerability scans for Linux, Windows, and AWS machines.
• Research CVEs and present remediation actions to admins.

Skills

NIST 800-37/800-171

ACAS (Tenable)

HBSS Trellix ePO

Security+ CE

Current security clearance

Tools

SIEM

Vulnerability Scanning

DS/IPS

Job description

Information System Security Manager (ISSM)

Cambridge, MA

MORSE Corp is an employee owned, small business based in Cambridge, MA, Arlington, VA, and Seattle, WA with a history of fielding cutting-edge technology. MORSE boasts a specially selected team of scientists, engineers, and software developers to deliver best-in-class technical solutions that solve difficult multidisciplinary problems faced by the US National Security Ecosystem.

The Information System Security Manager (ISSM) is responsible for ensuring that security considerations are taken into account in both classified and unclassified IT environments. The ISSM serves as an advisor for all matters related to the security of the information systems. The Cybersecurity Analyst uses various information security frameworks and agency-specific implementation guidance to obtain and maintain compliance for information systems

Responsibilities

Ensure that systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.

Participate in the systems development life cycle to ensure that the systems are designed with proper security features and safeguards.

Maintain security architecture (SIEM, Vulnerability Scanning, DS/IPS).

Collaborate with ISSMs, System Administrators, and Network Administrators to ensure information systems remain compliant.

Draft policies and procedures related to the security of the information system and ensure compliance with government requirements.

Test required controls, record assessments, and maintain the POA&M.

Perform continuous monitoring of security controls as required by NIST 800-37 and the Cybersecurity Maturity Model Certification (CMMC).

Analyze vulnerability scans for Linux, Windows, and AWS machines.

Research CVEs to understand remediation actions and present findings to System Administrators.

Skills and Requirements

1 years of relevant cybersecurity experience.

A strong understand of NIST 800-37, NIST 800-171, or similar regulatory frameworks.

Prior experience implementing and assessing compliance with ACAS (Tenable) and HBSS (Trellix ePO) requirements.

Security+ CE, or other certification which meets the IAM Level I standard from DoD 8570.01-M is preferred.

Current Secret security clearance with the ability to obtain a Top Secret clearance and additional accesses as necessary. Current Top Secret preferred.

MORSE Corp’s salary range for this role carefully considers a wide range of compensation factors, including but not limited to, prior experience, education, skills and expertise, location, internal equity, and other factors that are job related and consistent with business need. Therefore, final offer amounts may vary from the amount stated. Depending on role eligibility, total compensation may also include bonus, stock, 401(k) match, paid time off, medical, dental, vision and life insurance.

Employees also receive 10 paid holidays per year. MORSE maintains an “open” leave policy that does not restrict exempt, regular full-time employees to a specificnumber of paid sick or vacation days. However, this policy is not an “unlimited” paid leave policy.

Compensation

$90,000 - $150,000 USD

The team at MORSE takes pride in being the smart team that is easy to work with. We focus on steady, long-term success with an emphasis on exceptionalism and delivering mission-critical impact to our customers. For more information, please visit www.morsecorp.com .