Information Systems Security Officer (ISSO - 1677

Global InfoTek, Inc.; Reston (VA); In loco; USD 110.000 - 140.000; Tempo pieno

Descrizione del lavoro

Global InfoTek, Inc. is seeking an Information Systems Security Officer (ISSO) to ensure the confidentiality, integrity, and availability of critical federal and defense systems for a GSA contract.

You will navigate the RMF lifecycle and conduct continuous monitoring, ensuring compliance with federal mandates. The ideal candidate is highly organized and detail‑oriented, adept at tracking compliance artifacts and remediation, and collaborates with system administrators to apply security hardening

Competenze

• Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
• Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
• Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
• Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
• Demonstrated hands-on experience in Agile delivery models (e.g., SCRUM, Kanban, SAFe) and a DevSecOps framework.

Mansioni

• Navigate the RMF lifecycle in accordance with FISMA requirements.
• Conduct daily, weekly, and monthly continuous monitoring activities and audits.
• Coordinate with system admins to apply security hardening guidelines and track remediation.
• Develop, maintain, and update SSPs and POA&Ms for audits.
• Gather and track artifacts to prove control compliance for audits.
• Utilize government GRC systems (eMASS, Xacta, CSAM, or Archer) for records.
• Report security incidents to ISSM and incident response teams.

Conoscenze

RMF process (NIST 800-37)

NIST 800-53 controls

Vulnerability scanning

GRC systems

Agile/DevSecOps

Incident response coordination

Formazione

Bachelor's Degree

Master’s Degree preferred

Strumenti

Tenable/Nessus/ACAS

Qualys

Splunk

Descrizione del lavoro

Clearance Level: Secret

US Citizenship: Required

Job Classification: Regular, Full-Time

Location: Reston, VA
Years of Experience: 7-10 Years of Experience

Education Level: Bachelor's Degree, Master’s Degree preferred. Experience may be considered in place of education requirement.

Salary: The salary offered within this range will depend on the candidate's relevant experience, qualifications, and security clearance.

Briefly Describe the Work: GITI is seeking an Information Systems Security Officer (ISSO) to ensure the confidentiality, integrity, and availability of critical federal and defense systems to support a General Services Administration (GSA) contract. You will play a vital role in navigating the Risk Management Framework (RMF) lifecycle by conducting continuous monitoring and ensuring compliance with federal mandates. The ideal candidate is highly organized, detail-oriented, and excels at tracking compliance artifacts and vulnerability remediation within highly regulated environments across various government agencies.

Core Responsibilities:

• Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements.
• Conduct daily, weekly, and monthly continuous monitoring activities, including audit log reviews and account management audits.
• Coordinate with system administrators to apply security hardening guidelines (e.g., DISA STIGs, CIS Benchmarks) and track the remediation of vulnerability scan results.
• Develop, maintain, and update critical security documentation, including System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms).
• Gather and track artifacts and evidence to prove control compliance for internal and external audits.
• Utilize and maintain records within government Governance, Risk, and Compliance (GRC) systems (e.g., eMASS, Xacta, CSAM, or Archer).
• Report security incidents or unauthorized activities immediately to the ISSM and appropriate incident response teams.

Required Skills:

• Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
• Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
• Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
• Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
• Excellent problem-solving and analytical skills to track complex security issues.
• Demonstrated hands-on experience in Agile delivery models (ex. SCRUM, Kanban, SAFe) and a DevSecOps framework.

Desired Skills:

• Experience working alongside DevSecOps and IT operations teams.
• Familiarity with zero-trust network principles.

Preferred Certifications:

• DoD 8140/8570 IAM/IAT Level II certification (e.g., Security+ CE, CAP/CGRC, or CySA+)

Global InfoTek , Inc . is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.

About Global InfoTek, Inc . Global InfoTek Inc. has an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation's pressing cyber and advanced technology needs. GITI has rapidly merged pioneering technologies, operational effectiveness, and best business practices for over two decades.