Information Systems Security Officer

ManTech; Annapolis (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a motivated Information Systems Security Officer to enhance their security posture. In this pivotal role, you'll be responsible for maintaining the operational security of information systems, developing security policies, and managing vulnerabilities. Ideal candidates will possess extensive experience in security frameworks and tools, along with a strong educational background in computer science. Join a dynamic team that values innovation and security, and contribute to safeguarding critical information in a collaborative environment. If you're passionate about security and ready to make an impact, this is the opportunity for you!

Qualifications

• 10 years of ISSO experience with a Bachelor's degree or equivalent experience.
• DoD 8570 compliance required at IAM Level 1 or higher.

Responsibilities

• Ensure operational security posture for information systems.
• Develop and update System Security Plans and manage system changes.

Skills

Information Systems Security

Risk Management Framework (RMF)

Vulnerability Assessment

Security Policy Development

Communication Skills

Education

Bachelor's Degree in Computer Science

DoD 8570 Compliance

Tools

Nessus

Security Scanning Tools

Job description

ManTech seeks a motivated, career and customer-oriented Information Systems Security Officer (ISSO) to join our team in Hanover, MD.

Responsibilities Included but are not limited to:

1. Ensures that the appropriate operational security posture is maintained for an Information System, or IS.
2. Develop and update System Security Plans (SSP’s).
3. Manages and controls changes to the system and assesses the security impact of those changes.
4. Incorporates and/or implements the Risk Management Framework (RMF) daily and instructs and/or educates management on its necessity for maximum security of data.
5. Performs Nessus Vulnerability and Compliance scans against all operating system hardware, to interpret technical aspects and information security assessment results, while developing a plan of action for mitigating negative findings.
6. Creating and implementing security policies, standards, and procedures to protect sensitive information.

Minimum Qualifications:

1. Shall have ten (10) years’ experience as an ISSO with a bachelor’s degree in Computer Science or related discipline from an accredited college or university. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.
2. DoD 8570 compliance with Information Assurance Management (IAM) Level 1 or higher is required.
3. Experience to include at least two (2) of the following areas: knowledge of current security tools/hardware/software security implementation, communication prototype, and encryption techniques/tools.

Preferred Qualifications:

1. Experience deploying and configuring security scanning tools in support of continuous monitoring processes.
2. Experience providing critical written and verbal analyses of previously generated security architecture documentation and vulnerability and risk assessments.
3. Experience managing a variety of tickets to assist in the CM of the information system, firewall implementations SSP changes, and Account Management.
4. Experience designing and implementing Plans of Action and Milestones (POAM) to remediate findings from vulnerability and risk assessments.
5. Experience reviewing, preparing, and updating ATO packages in accordance with NIST Risk Management Framework and customer policy, procedures, and guidelines.

Clearance Requirements:

1. Must have a current/active TS/SCI w/ Polygraph.
2. Must be a US Citizen.

Physical Requirements:

The candidate must be able to move, carry and deliver workstations from inside the office to customer’s desk. The person in this position must be able to remain in a stationary position 50% of the time. Must communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.