Information System Security Officer

ECS Corporate Services; Arlington (VA); On-site; USD 120,000 - 165,000; Full time

Job summary

Everforth ECS is seeking an Information System Security Officer (ISSO) to work onsite in Arlington, VA and Fairfax, VA. The mid-level ISSO will ensure that a DoD VDI environment remains secure and functional, performing A&A, RMF, and continuous monitoring tasks with minimal supervision.

Ideal candidates have 3–5 years in cybersecurity, experience with ACAS, HBSS/ESS, and a strong DoD security background. A Bachelor's degree or four years of related experience is required, plus active clearance

Qualifications

• Bachelor's degree in a related field or four years of equivalent DoD experience.
• 3–5 years of cybersecurity experience with A&A, RMF, and continuous monitoring.
• Active DoD Secret clearance with ability to obtain TS/SCI.
• Experience using eMASS, ACAS, HBSS/ESS, RMF guidance, and STIGs.
• Excellent written and oral communication, able to interface with all levels.

Responsibilities

• Lead and assist cybersecurity activities including A&A, configuration management, and incident response.
• Support enterprise projects in the eMASS toolset and ensure secure DoD VDI environments.
• Apply policy and procedures to monitor and manage cybersecurity risk in production and development environments.
• Coordinate with internal and external stakeholders on compliance matters.
• Provide knowledge transfer to team members and clients.

Skills

Assessment & Authorization

Continuous Monitoring

Vulnerability Remediation

Stakeholder Communication

Education

Bachelor's Degree

Tools

eMASS

ACAS

HBSS / ESS

RMF

STIGs

Job description

Job Description

Everforth ECS is seeking anInformation System Security Officer (ISSO)to work onsite in ourArlington, VAand Fairfax, VAcorporate offices.Job Description:Everforth ECS Federal has an immediate opening for a mid-level Information System Security Officer (ISSO) to ensure that a Department of Defense (DoD) virtual desktop infrastructure (VDI) environment remains secure and functional. Must have at least 3 to 5 years' experience (pending education requirements) performing a variety of cyber security related tasks, including continuous monitoring, vulnerability remediation, and the development and implementation of standards and procedures. The ideal candidate will have a technical background; experience with heterogeneous environments; and the ability to interface with all levels from end-users to senior management.Candidates must be able to take ownership of tasks and deadlines; work without supervision; commit to high-quality results; and provide common sense solutions. In addition, candidates should be adaptable, detail-oriented, and have well-developed written, verbal, and interpersonal skills.

PRIMARY DUTIES

• Assist and lead various cybersecurity activities such as Assessment and Authorization (A&A), Configuration Management, Continuous Monitoring, and Incident Response.
• Assist with the Management and Sustainment of customer projects in the Enterprise Mission Assurance Support Service (eMASS) Toolset.
• Apply knowledge, tools, policy, and procedures to implement, monitor, and manage cybersecurity risk in production, test,and development environments.
• Utilize Assured Compliance Assessment Solution (ACAS), Electronic Security System (ESS) - formally Host-Based Security System (HBSS), and other tools to monitor, detect, and analyze vulnerabilities.
• Coordinate with internal and external stakeholders concerning security compliance.
• Support and provide knowledge transfer to team members and clients.
• Other duties as needed.

Salary Range

$120,000-165,000

General Description of Benefits

• Must be a US Citizen
• Must have a Bachelor's Degree in a related field; four (4) years relevant experience in lieu of a degree
• 3+ years of Cybersecurity Experience
• Active DoD Secret clearance with the ability to obtain TS/SCI Capable of understanding the system and its environment of operation
• Experience utilizing Enterprise Mission Assurance Support Service (eMASS), ACAS, ESS/HBSS, DoD Risk Management Framework (RMF), Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Guide (DAAG), Information Assurance Vulnerability Management (IAVM) alerts, Secure Technical Implementation Guides (STIGs), etc.
• Have an active Security+ (Plus) certification or equivalent certification that satisfies DoD 8140 requirements Able to obtain CISSP, CISM, CASP+ CE, CAP, GSLC, or CCISO