Information Systems Security Officer

Redhorse; Huntsville (AL); On-site; USD 100,000 - 130,000; Full time

Job summary

Redhorse Corporation is seeking an Information Systems Security Officer to safeguard sensitive data and systems. This high-impact role involves extensive analytical support, security solution design, and interaction with government security regulations, requiring a Bachelor's degree and 7 years of relevant experience.

Qualifications

• 7 years of experience in information systems security required.
• Active Top Secret security clearance with Sensitive Compartmented Information required.
• Experience achieving Authorities to Operate for Government systems preferred.

Responsibilities

• Provide analytical support to manage supply chain compromise risks.
• Design and implement solutions for security requirements.
• Investigate security breaches and document incidents.

Skills

Analytical skills

Technical expertise

Understanding of security regulations

Education

Bachelor's Degree

Tools

NIST Cybersecurity Framework

Vulnerability scanning tools

Penetration testing tools

Scripting languages (Python, PowerShell)

Cloud security architectures (AWS, Azure, GCP)

Job description

About the Organization

Now is a great time to join Redhorse Corporation. Redhorse specializes in developing and implementing creative strategies and solutions with private, state, and federal customers in the areas of cultural and environmental resources services, climate and energy change, information technology, and intelligence services. We are hiring creative, motivated, and talented people with a passion for doing what's right, what's smart, and what works.

About the Role

Redhorse transforms the way government uses data and technology. As an Information Systems Security Officer (ISSO), you will play a critical role in protecting our clients' sensitive data and systems from supply chain compromises, both intentional and unintentional. This is a high-impact position, requiring a blend of technical expertise, analytical skills, and a deep understanding of government security regulations. You will be instrumental in ensuring the security and integrity of our systems, safeguarding national security interests.

Key Responsibilities

• Provide analytical support to manage the increasing risk of supply chain compromise related to security, whether intentional or unintentional.
• Design, develop, engineer, and implement solutions to meet Mandatory Least Privilege (MLS) requirements.
• Oversee the enhancement and maintenance of the software/hardware delivery lifecycle, including coding practices, and integration of security principles and practices into Agile/DevOps development.
• Perform complex risk analyses, including risk assessments.
• Investigate security breaches and other security incidents; document breaches and assess the damage caused.
• Work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing.
• Establish and satisfy information assurance and security requirements based on analysis of user, policy, regulatory, and resource demands.
• Create new and edit existing documentation that forms the Authority to Operate (ATO) package, including the System Security Plan and IS contingency plan.
• Support customers at the highest levels in the development and implementation of doctrine and policies.
• Apply expertise to Government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
• Perform analysis, design, and development of security features for system architectures.

Required Experience/Clearance

• Bachelor's Degree
• 7 years of experience in information systems security.
• Experience achieving Authorities to Operate (ATO) for Government systems of all categories (Preferred).
• Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) required.

Desired Experience

• Experience with specific security frameworks (e.g., NIST Cybersecurity Framework).
• Experience with cloud security architectures (AWS, Azure, GCP).
• Relevant security certifications (e.g., CISSP, CISM, Security+, etc.).
• Experience with scripting languages (e.g., Python, PowerShell).
• Experience with vulnerability scanning and penetration testing tools.

Equal Opportunity Employer/Veterans/Disabled

Accommodations:

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition [e-mail]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs.

This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.