Information System Security Officer

E-INFOSOL LLC; Clarksburg (WV); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision

401(k)

HSA/FSAs

Bonuses for certifications

Job summary

E-INFOSOL LLC is seeking an Information System Security Officer to support a federal agency in Clarksburg, WV. The ISSO will oversee security configurations, risk management, and compliance with NIST SP 800-53, FISMA, and related standards.

Responsibilities include security authorization, vulnerability management, incident response support, and maintaining ATO status while coordinating with government managers and contractors to meet mission needs.

Qualifications

• Active Top-Secret clearance with capability to obtain SCI/CI Poly if needed.
• Bachelor’s and/or Master’s degree in Computer Science, MIS, or related field.
• Experience with CI/CD pipelines, virtualization, and cloud computing.
• Familiarity with security tools including Nessus, Security Center, AppDetectivePro, HP WebInspect, NMAP.

Responsibilities

• Ensure day-to-day implementation and maintenance of security configurations for the customer’s information system(s).
• Lead security authorization processes and recommend security best practices and standards.
• Manage cybersecurity posture including vulnerability management and incident response support.
• Upload security evidence to GRC and support ATO processes.
• Write and maintain SSPs, POA&Ms, Risk Assessments, PIAs, and related documents.
• Coordinate with government managers and contractors to ensure compliance with requirements.
• Conduct vulnerability scans and monitor security controls to maintain ATO.

Skills

Top-Secret clearance

CI/CD knowledge

Cloud computing know-how

Security risk management

Education

Bachelor’s or Master’s in CS/MIS or related

Tools

Tenable Nessus

Security Center

AppDetectivePro

HP WebInspect

NMAP

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information System Security Officer

Clarksburg, WV, US

5 days ago Requisition ID: 1406

26-23-03-000

Summary

E-INFOSOL LLC is seeking a highly motivated Information System Security Officer to support our efforts in Clarksburg, WV

Job Description

TheSenior Information System Security Officer (ISSO)supports a federal agency in verifying compliance with Federal Information Security Management Act (FISMA), National Institute of Standards and Technology (NIST), DISA Security Technical Implementation Guide (STIG), Federal Information Processing Standards (FIPS), National Information Processing Standards (NIPS), and support and the establishment, implementation, and maintenance of a life-cycle security model that develops, maintains, and dispositions information systems, services, and data, and safeguards their confidentiality, integrity, and availability to meet the needs and support the missions of the agency.

Job Responsibilities:

• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for the customer’s information system(s)
• Lead security authorization processes and procedures. Recommend security best practices and system configuration standards
• Take full responsibility of cybersecurity posture and analysis to include vulnerability management, incident response support, and Risk Management Framework
• Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application to support security control implementation during the monitoring phase
• Write System Security Plans, POA&Ms (Plan of Actions and Milestones), Risk Assessments, PIAs (Privacy Impact Analyses), and supporting documentation for systems subject to NIST SP 800-53
• Support Assessment & Authorization (A&A) activities. Achieve and maintain ATO (Authority to Operate), as required
• Conduct required IS vulnerability scans according to risk assessment parameters
• Coordinate system owner concurrence for correction or mitigation actions
• Monitor security controls for the customer’s information system(s) to maintain security Authorized To Operate (ATO)
• Create security A&A documentation for CODIS and maintains the project system security procedure for the Information System Security Manager (ISSM)
• Review system audit trails, and reports all information system security incidents through the appropriate channels
• Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before granting access to the Information System and administers/witnesses signed user
• Manage Information Security Audits by federal departments/agencies, including third party auditors
• Reports all security-related incidents to the ISSM
• Initiate, with the approval of the ISSM, protective and corrective measures when a security incident or vulnerability is discovered
• Interface with appropriate government managers and contractors to ensure understanding of and compliance with security requirements
• Participates in CCBs and advises on the security impacts of all proposed changes and software requirements
• Supports certification activities throughout the A&A process
• Oversees system recovery processes as well as Continuity of operations (COOP) exercises
• Assess emerging network system and enterprise-level risks and vulnerabilities. Advises leadership on cyber security risk management, security strategy, security project planning, and security architecture
• Advise and conduct liaison with appropriate security organizations on security status of configuration changes to the operational system.

Required Qualifications:

• Active Top-Secret clearance with capability to obtain SCI/CI Poly if needed to meet contract requirements.
• Bachelors and/or Master's degree in Computer Science, Management Information Systems, or related computer science technical degree
• Working knowledge of Continuous Integration/Continuous Delivery (CI/CD) Pipelines Virtualization, software-defined infrastructure and working knowledge of cloud computing technologies
• Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, AppDetectivePro, HP Weblnspect, Network Mapper (NMAP), and/or similar applications

Preferred Qualifications:

• CompTIA Security+ or (ISC)² Security Certified Practitioner (SSCP), (ISC)2 CISSP, or higher certification

About E-INFOSOL

E-INFOSOL is a Service Disabled and Veteran Owned Small Business (SDVOSB) located in the Washington, D.C. metropolitan area. We specialize in building modern and tailored solutions to support our customers’ mission. As a mission-first organization, we deliver Subject Matter Expertise (SME) in cloud computing, virtualization, cyber security, software development and data services. We support the Intelligence Community, Department of Defense, Federal Law Enforcement, Civilian Agencies and the Private Sector.

Through strategic partnerships with top industry players such as Amazon Web Services (AWS), Broadcom, Microsoft and Cisco, E-INFOSOL provide an array of IT products and solutions. Combined with our industry expertise, we deliver in-depth knowledge on Government requirements and fully understand NIST and DoD security requirements. Our expertise in the latest technologies combined with our understanding of infrastructure needs and security requirements provides the best combination for achieving innovative and secure environments for Government Agencies and Private Sector.

"Putting People First, Achieving our Mission Together". E-INFOSOL is a people-first organization focusing on a positive employee culture that inspires creativity and innovation in support of our customers. With opportunities such as reimbursement and bonuses based on completion of certifications, we invest in our employees’ career growth.

• Medical - company subsidized premiums for employees, including family and dependent options.
• Dental and Vision
• Retirement Savings (401k) up to 4% match
• Health Savings Account (HSA), FSA and DCFSA
• Company-paid Short/Long-term disability (w/ additional supplemental options)
• Company-paid Life and AD&D (w/ additional supplemental options)
• Generous Paid Time Off and ALL 11 Federal Holidays
• Legal and Identity Protection Services
• Bonuses for certifications and reimbursement
• UberOne, Company Outings (Sporting events, Happy Hours, etc.), Discounts on services including Pet Insurance

Company Awards

• SBA 8(a) Certified
• SDVOSB
• GSA Contract Holder
• Inc. 5000

Equal Employment Opportunity Policy

E-INFOSOL LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.