Information Systems Security Officer

Redhorse Corp.; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Redhorse Corp. seeks a dedicated Information Systems Security Officer (ISSO) to safeguard sensitive data and systems. This pivotal role requires expertise in security regulations and risk management within government frameworks, offering a chance to have a lasting impact on national security. The successful candidate will apply analytical skills to enhance security measures, oversee compliance, and support the development of policies and procedures.

Qualifications

• 7 years of experience in information systems security required.
• Active Top Secret (TS) security clearance with SCI required.
• Experience achieving Authorities to Operate (ATO) preferred.

Responsibilities

• Provide analytical support to manage supply chain risks.
• Oversee security lifecycle and integrate security practices into Agile/DevOps.
• Investigate security breaches and perform risk analyses.

Skills

Analytical skills

Technical expertise

Understanding of security regulations

Education

Bachelor's Degree

Tools

Vulnerability scanning tools

Penetration testing tools

AWS

Azure

GCP

Job description

About the Organization

Now is a great time to join Redhorse Corporation. Redhorse specializes in developing and implementing creative strategies and solutions with private, state, and federal customers in the areas of cultural and environmental resources services, climate and energy change, information technology, and intelligence services. We are hiring creative, motivated, and talented people with a passion for doing what's right, what's smart, and what works.

About the Role

Redhorse transforms the way government uses data and technology. As an Information Systems Security Officer (ISSO), you will play a critical role in protecting our clients' sensitive data and systems from supply chain compromises, both intentional and unintentional. This is a high-impact position, requiring a blend of technical expertise, analytical skills, and a deep understanding of government security regulations. You will be instrumental in ensuring the security and integrity of our systems, safeguarding national security interests.

Key Responsibilities

• Provide analytical support to manage the increasing risk of supply chain compromise related to security, whether intentional or unintentional.
• Design, develop, engineer, and implement solutions to meet Mandatory Least Privilege (MLS) requirements.
• Oversee the enhancement and maintenance of the software/hardware delivery lifecycle, including coding practices, and integration of security principles and practices into Agile/DevOps development.
• Perform complex risk analyses, including risk assessments.
• Investigate security breaches and other security incidents; document breaches and assess the damage caused.
• Work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing.
• Establish and satisfy information assurance and security requirements based on analysis of user, policy, regulatory, and resource demands.
• Create new and edit existing documentation that forms the Authority to Operate (ATO) package, including the System Security Plan and IS contingency plan.
• Support customers at the highest levels in the development and implementation of doctrine and policies.
• Apply expertise to Government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
• Perform analysis, design, and development of security features for system architectures.

Required Experience/Clearance

• Bachelor's Degree
• 7 years of experience in information systems security.
• Experience achieving Authorities to Operate (ATO) for Government systems of all categories (Preferred).
• Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) required.

Desired Experience

• Experience with specific security frameworks (e.g., NIST Cybersecurity Framework).
• Experience with cloud security architectures (AWS, Azure, GCP).
• Relevant security certifications (e.g., CISSP, CISM, Security+, etc.).
• Experience with scripting languages (e.g., Python, PowerShell).
• Experience with vulnerability scanning and penetration testing tools.

Equal Opportunity Employer/Veterans/Disabled

Accommodations:

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition [e-mail]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs.

This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.