Information Systems Security Officer II

Saic; Washington (District of Columbia); Hybrid; USD 80,000 - 120,000; Full time

Job summary

SAIC seeks a mid-level Information System Security Officer (ISSO) to support a government customer. This role is remote, but you must be local to the DC area (within 50 miles) and will be expected to come in at least once every 2 weeks in the future.

Responsibilities include advising on cybersecurity controls, participating in RMF/FedRAMP implementations, performing vulnerability assessments, and coordinating with stakeholders.

Qualifications

• Must hold one of the listed security Certifications: CISSP, CASP, CISA, CISM, CEH, SSCP, GISP, GSLC.
• Five years of cybersecurity experience and five years of FISMA experience are required.
• US Citizenship with ability to obtain DHS Public Trust is required.

Responsibilities

• Provide objective advice to improve resilience and protect against cyber threats.
• Participate in projects delivering client-focused cybersecurity results.
• Apply NIST RMF and FedRAMP guidance and evaluate security controls.

Skills

Vulnerability scanning

Operating system knowledge

Information security principles

Application security

Education

Bachelor's Degree

Job description

Description

SAIC is seeking a mid-level Information System Security Officer (ISSO) for our team to support a government customer.

This position is remote, but the candidate must be local to the DC area (within 50 miles)and will be expected to come in at least once every 2 weeks in the future.

Responsibilities:

• Provides objective advice and specialized skills in order to create value, maximize growth or improve performance, resiliency and protection against cybersecurity related threats, vulnerabilities, and other cybersecurity related remediation activities.
• Participates in consulting projects that deliver customer focused results aligned with strategic goals of the Client.
• Facilitates review and analysis of strategic issues and advises regarding implementation of strategy.
• May assist in conducting education classes. May provide support in the following areas: guidance to resolving issues, analysis of trends and issues, development of procedures and processes, oversight of technical implementation and execution of strategic plans.
• Applies specialized knowledge of sensitive system Cybersecurity requirements and Privacy Act requirements.
• Applies specialized knowledge and experience with the implementation of the NIST Special Publication (SP) 800 family of publications, particularly those associated with NIST’s Risk Management Framework and the Federal Risk and Authorization Management Program (FedRAMP).
• Applies specialized knowledge and experience with evaluating system, network, or infrastructure security controls against requirements such as FISMA, Federal Information Processing Standards (FIPS, and NIST guidelines.
• Applies knowledge of DHS Information Security Policy Directives and Handbooks is preferred.
• Applies knowledge and experience with standard IA concepts, practices, and procedures. Working independently to solve problems quickly and completely.
• Applies specialized experience with three (3) of the four (4) following criteria is required:
  • Vulnerability scanning execution, assessment, and analysis.
  • Operating system and network knowledge (i.e., Local Area Networks [LAN] and Wide Area Networks [WAN].)
  • Information security and assurance principles (e.g., Defense-in-depth) and associated supporting technologies.
• Application security, database security, and network security.
• Possess ability to assess and weigh current and evolving security threats in an operational environment.
• Possess good oral and written communication skills.
• Team player who can collaborate with multiple stakeholders to arrive at the best solution.
• Relies on extensive experience and judgment to plan and accomplish goals. Works independently to solve problems quickly and completely.

Qualifications

Requirements:

Certification: Mustpossesses at least oneof the following professional security certifications: CISSP, CASP, CISA, CISM, CEH, SSCP, GISP, GSLC.

Education: Must have a Bachelor's Degree and 5 years of experience.

Experience: *For equivalency, 1 year of experience equals 1 year of education.

• Varies depending on years of experience.
• Must have 5 years of Cybersecurity experience.
• Must have 5 years of FISMA experience.
• Must be a U.S. Citizen with the ability to obtain and maintain a DHS Public Trust.
• Must have specialized experience with three (3) of the four (4) following criteria:
  • Vulnerability scanning execution, assessment, and analysis.
  • Operating system and network knowledge (i.e., Local Area Networks [LAN] and Wide Area Networks [WAN].)
  • Information security and assurance principles (e.g., Defense-in-depth) and associated supporting technologies.
  • Application security, database security, and network security.

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.