Information Systems Security Officer

Two Six Technologies; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Retirement benefits

Paid leave

Tuition assistance

Professional development

Job summary

Two Six TechnologiesはCorporate Information Securityチームの一員としてISSOとして活躍します。Arlington, VAオフィスでの常勤勤務で、分類情報システムのコンプライアンス維持を主導します。

RMFの全ステップに熟知し、STIG/POA&Mの作成・監視を担い、eMASSやXactaなどのツールを用いてRMFパッケージを作成します。英語での文書作成・口頭対応能力が必須です。

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 3+ years of classified (Collateral, SCIF, SAP-F) environments as ISSO or related.
• Understanding of RMF Steps 1-7.
• Active DoD 8140 certifications such as Security+, GCISP, GSEC, SSCP, CASP+, CISM, CISSP or ability to obtain within 6 months.
• Ability to work onsite daily at the Arlington headquarters with occasional travel.

Responsibilities

• Work with Corporate Information Security to ensure compliant information systems.
• Help scope program requirements and draft RMF materials.
• Complete STIG checklists and track POA&Ms.
• Use RMF lifecycle tools (eMASS, Xacta) for RMF packages.
• Review security logs, network activity, and data transfers for anomalies.
• Assist in remediation of security incidents.

Skills

RMF Steps 1-7

Active DoD 8140 certs

Onsite Arlington

Team collaboration

Education

Bachelor's degree or equivalent experience

Tools

Jira

Kanban

Windows 11

Ubuntu Linux

Job description

At Two Six Technologies, we build, deploy, and implement innovative products that solve the world’s most complex challenges today. Through unrivaled collaboration and unwavering trust, we push the boundaries of what’s possible to empower our team and support our customers in building a safer global future.

Two Six Technologies is growing and we are seeking anInformation System Security Officer (ISSO) to join our Corporate Information Security team . You will be responsible for assisting the Information System Security Manager (ISSM) in ensuring compliance for assigned classified programs.

The ideal candidate is eager to learn and adapt to new challenges in a fast-paced and growing environment, and works well within a team environment while also accomplishing tasks independently. This position requires attention to detail, strong analytical and critical problem-solving abilities for technical and non-technical problems, and excellent written and oral communication skills.

The environments you will work in include: Windows 11, Group Policy, Ubuntu Linux, networked and standalone systems, GFE networks, Google Workspace, Jira, Kanban

This is an on-site position working from our Arlington, VA office daily with occasional travel to Herndon.

What you will do:

• Work with the Corporate Information Security team to ensure all classified information systems remain in or achieve compliance
• Assist in the organization and tracking of Information Security’s various projects and keep efforts and communication aligned to meet goals and deadlines
• Work closely with ISSM and Project Managers to scope program requirements, propose pathways, and construct ATO packages
• Complete STIG checklists and track POA&Ms
• Use ATO lifecycle products (e.g. eMASS, Xacta, and others) for drafting and submitting RMF packages
• Review security logs, networks, data transfers, and systems for anomalous user activity.
• Assist in the remediation of Security incidents.
• Perform weekly, bi-weekly, and monthly audits for all assigned accredited systems.
• Conduct Continuous Monitoring activities per customer requirements.
• Play a vital role in the RMF process serving as an advisor to the ISSM.
• Perform annual self-inspections and self-assessments of TST's security program.
• Track changes to information systems as part of Change Management and attend Change Management Meetings.
• Assist ISSM in managing TST's Insider Threat Program.
• Work actively and proactively towards maintaining TST's security posture using technical, administrative, and procedural solutions.

What You Will Need:

• Bachelor's degree in a related field or additional experience and professional certifications
• 3+ years of experience working within classified (Collateral, SCIF, SAP-F) environments as an ISSO, Network Engineer, Cybersecurity Analyst, SOC Analyst or related role
• Understanding of the RMF Steps 1-7
• Active DoD 8140 info security certifications such as: Security+, GCISP, GSEC, SSCP, CASP+, CISM, CISSP or ability to obtain within 6 months of employment
• Ability to work independently to identify, assess & resolve unique security problems
• Ability to work onsite daily at the Arlington headquarters with occasional travel to local sites

What we would like:

• Experience with successful DCSA onsite compliance inspections with a variety of government customers
• Working knowledge of Jira or similar ticket management systems
• Experience writing customer reports, SOPs, Information Security bulletins
• Experience with Incident Response
• Experience with Windows and Linux automation scripting

Security Clearance:

Active Top Secret with SCI eligibility and willingness to obtain poly if required

Two Six Technologies is committed to providing competitive and comprehensive compensation packages that reflect the value we place on our employees and their contributions. We believe in rewarding skills, experience, and performance. Our offerings include but are not limited to, medical, dental, and vision insurance, life and disability insurance, retirement benefits, paid leave, tuition assistance and professional development.

The projected salary range listed for this position is annualized. This is a general guideline and not a guarantee of salary. Salary is one component of our total compensation package and the specific salary offered is determined by various factors, including, but not limited to education, experience, knowledge, skills, geographic location, as well as contract specific affordability and organizational requirements.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Two Six Technologies’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.