Information System Security Officer

Red Arch Solutions, Inc.; Annapolis (MD); On-site; USD 181,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401K with company match

Paid time off

Bonus programs

Tuition reimbursement

529 college savings plan

College loan repayment

Holidays

Referral bonuses

Job summary

Red Arch Solutions seeks a Senior Information Systems Security Officer to safeguard data and ensure security, integrity, and confidentiality across a complex big-data app ecosystem. You will design, implement, and validate security controls across multiple enclaves and architectures.

Responsibilities include risk assessment, security planning, and coordinating with architects, developers, and testers to ensure compliance and continuous authorization (ATO).

Qualifications

• Active Top Secret/SCI clearance with a polygraph.
• DoD 8140 / 8570 IAM Level II or equivalent baseline certification.
• Experience ensuring security compliant systems and achieving ATO.
• Strong ability to assess risk and implement mitigation.

Responsibilities

• Designs, develops, and integrates IA and security systems for multi-enclave environments.
• Performs security assessments and risk mitigation.
• Prepares technical reports and briefings.
• Reviews C&A documentation for completeness and compliance.
• Supports security planning and awareness activities.

Skills

Top Secret/SCI clearance

Security policy

Threat analysis

Collaboration with teams

Education

Bachelor's degree or equivalent

Master's degree or equivalent

PhD or equivalent

Additional experience in lieu of degree

Tools

Xacta

STIG checklists

ACAS scans

Job description

Red Arch is hiring an InformationSystems Security Officer. You will be responsible for providing application development and support to an eco-system of big data apps, in a collaborative environment.

As a Senior Information Systems Security Officer you will be responsible for safeguarding an organization's computer networks and systems to the highest standards. The primary focus is on ensuring the security, integrity, and confidentiality of data within these systems.

Position Information

• Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements.
• Analyzes architecture and system functionality for multiple technologies.
• Contributes to the development and evaluation of attack scenarios.
• Prepares and delivers technical reports and briefings.
• Has a complete understanding of Risk Management Framework and how to implement the process on program systems/networks.
• Performs, or reviews, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established IA standards and regulations, and recommend mitigation strategies.
• Validates and verifies system security requirements definitions and analysis and establishes system security designs.
• Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application security policy and enterprise solutions.
• Supports the building of security architectures.
• Enforces the design and implementation of trusted relations among external systems and architectures.
• Assess' and mitigates system security threats/risks throughout the program life cycle.
• Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
• Reviews certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content.
• Performs system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of operational IA and CND systems.
• Performs limited penetration testing and routine exploit analysis.
• Performs system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements.
• Recommends system-level solutions to resolve security requirements.
• Supports the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.

Education and Experience Qualifications

• 14+ years of professional experience with a Bachelor's degree or equivalent
• 12+ years of professional experience with a Master's degree or equivalent
• 10+ years of professional experience with a PhD or equivalent
• Additional experience will be considered in lieu of a degree

Required Qualifications

• Working with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• Active Top Secret/SCI Clearance with a Polygraph
• Loading artifacts such as STIG checklists and ACAS scans.
• Helping to implement STIG checklists and mitigate scan findings.
• Answering questions to ensure systems are developed with security compliance built in.
• Supporting security assessment events and responding to all questions from PAT team, ISSMs and SCA
• Experienceworking with Xacta

• DoD 8140 / 8570 IAM Level II or equivalent baseline certification (e.g., Security+ CE, CISSP, CISM), if supporting DoD

Work locations Annapolis Jct, MD, Washington DC, Reston VA

Salary rage for this position: $181,000 to $190,000 #CJ

The Red Arch Solutions pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Determination of official compensation or salary relies on several factors including, but not limited to, level of position, job responsibilities, geographic location, scope of relevant work experience, educational background, certifications, contract-specific affordability, organizational requirements, alignment with local internal equity as well as alignment with market data.

Red Arch Solutions Benefits Snapshot:

• 100% paid employee healthcare premiums. CareFirst Advantage Best in Class Benefits.
• HaloScripts Concierge prescription medication service
• Generous PTO.
• 10 % 401K 6% match vested day one and up to 4% profit sharing contribution.
• Annualized bonus compensation.
• Spot bonuses for hard work.
• Tuition reimbursement.
• 529 College Saving Plan.
• College Loan Pay Back Program.
• 11 Paid Federal Holidays
• Generous Referral Bonuses.

Red Arch Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Have more questions about Red Arch? Email us at [e-mail]