Information Systems Security Officer - Senior (ISSO) BDVA 1667

Global InfoTek, Inc.; Reston (VA); Sur place; USD 110 000 - 170 000; Plein temps

Résumé du poste

Global InfoTek, Inc. is seeking an Information Systems Security Officer (ISSO) to safeguard federal and defense systems under a GSA contract. The role covers RMF lifecycle activities, continuous monitoring, and compliance documentation in a highly regulated environment.

You will work with systems administrators to implement security controls, manage SSPs/POA&Ms, and coordinate audits. A strong background in RMF, NIST controls, and DevSecOps practices is required, along with DoD/DHS policy

Qualifications

• Experience in information assurance or cybersecurity compliance.
• Understanding RMF (NIST 800-37) and NIST 800-53 controls.
• Familiarity with CNSSI 1253, DHS 4300A, or DoD SRGs.
• Experience with vulnerability scanning and auditing tools.
• Hands-on Agile/DevSecOps experience.

Responsabilités

• Navigate RMF lifecycle per FISMA.
• Perform continuous monitoring and audits.
• Apply security hardening (DISA STIGs, CIS Benchmarks) and track remediator.
• Maintain SSPs and POA&Ms.
• Gather artifacts for audits.
• Use GRC systems (eMASS, Xacta, CSAM, Archer).
• Report incidents to ISSM/IR teams.

Connaissances

RMF process

NIST 800-53

Vulnerability scanning

Agile/DevSecOps

Audit reviews

Formation

Bachelor's Degree

Master's Degree preferred

Outils

Tenable/Nessus/ACAS

Qualys

Splunk

Description du poste

Clearance Level: Secret

US Citizenship: Required

Job Classification: Regular, Full-Time

Location: Reston, VA
Years of Experience: 7-10 Years of Experience

Education Level: Bachelor's Degree, Master's Degree preferred. Experience may be considered in place of education requirement.

Salary: The salary offered within this range will depend on the candidate's relevant experience, qualifications, and security clearance.

Briefly Describe the Work: GITI is seeking an Information Systems Security Officer (ISSO) to ensure the confidentiality, integrity, and availability of critical federal and defense systems to support a General Services Administration (GSA) contract. You will play a vital role in navigating the Risk Management Framework (RMF) lifecycle by conducting continuous monitoring and ensuring compliance with federal mandates. The ideal candidate is highly organized, detail-oriented, and excels at tracking compliance artifacts and vulnerability remediation within highly regulated environments across various government agencies.

Core Responsibilities

• Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements.
• Conduct daily, weekly, and monthly continuous monitoring activities, including audit log reviews and account management audits.
• Coordinate with system administrators to apply security hardening guidelines (e.g., DISA STIGs, CIS Benchmarks) and track the remediation of vulnerability scan results.
• Develop, maintain, and update critical security documentation, including System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms).
• Gather and track artifacts and evidence to prove control compliance for internal and external audits.
• Utilize and maintain records within government Governance, Risk, and Compliance (GRC) systems (e.g., eMASS, Xacta, CSAM, or Archer).
• Report security incidents or unauthorized activities immediately to the ISSM and appropriate incident response teams.

Required Skills

• Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
• Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
• Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
• Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
• Excellent problem-solving and analytical skills to track complex security issues.
• Demonstrated hands-on experience in Agile delivery models (ex. SCRUM, Kanban, SAFe) and a DevSecOps framework.

Desired Skills

• Experience working alongside DevSecOps and IT operations teams.
• Familiarity with zero-trust network principles.

Preferred Certifications

• DoD 8140/8570 IAM/IAT Level II certification (e.g., Security+ CE, CAP/CGRC, or CySA+)

Global InfoTek, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.

About Global InfoTek, Inc. Global InfoTek Inc. has an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation's pressing cyber and advanced technology needs. GITI has rapidly merged pioneering technologies, operational effectiveness, and best business practices for over two decades.