ISSM: Secure National Systems & Compliance

Linuxconfig; Cambridge (MA); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

10 paid holidays

Open leave policy

Bonus and stock options

401(k) match

Health, dental, vision and life ins.

Job summary

MORSE Corp in Cambridge, MA seeks an Information System Security Manager (ISSM) to oversee security across classified and unclassified IT environments. You will advise on the security of information systems and coordinate with ISSMs, system and network administrators to maintain compliance with NIST SPs and CMMC.

The role requires 1 year of cybersecurity experience, knowledge of NIST 800-37/800-171, and ACAS/HBSS experience. A Secret clearance with TS preferred.

Qualifications

• 1 year of relevant cybersecurity experience.
• Strong understanding of NIST 800-37, 800-171 (or similar).
• Experience implementing/assessing ACAS and HBSS requirements.
• Security+ CE or DoD IAM Level I equivalent preferred.
• Current Secret clearance with TS preferred.

Responsibilities

• Ensure systems are operated and disposed of per security policies.
• Participate in SDLC to embed security features and safeguards.
• Maintain security architecture (SIEM, vulnerability scanning, DS/IPS).
• Collaborate with ISSMs, System Admins, and Network Admins to stay compliant.
• Draft security policies and procedures and ensure government compliance.
• Test controls, record assessments, and maintain POA&M.
• Perform continuous monitoring as required by NIST 800-37 and CMMC.
• Analyze vulnerability scans for Linux, Windows, and AWS machines.
• Research CVEs and present remediation actions to admins.

Skills

NIST 800-37/800-171

ACAS (Tenable)

HBSS Trellix ePO

Security+ CE

Current security clearance

Tools

SIEM

Vulnerability Scanning

DS/IPS

Job description

MORSE Corp in Cambridge, MA seeks an Information System Security Manager (ISSM) to oversee security across classified and unclassified IT environments. You will advise on the security of information systems and coordinate with ISSMs, system and network administrators to maintain compliance with NIST SPs and CMMC.

The role requires 1 year of cybersecurity experience, knowledge of NIST 800-37/800-171, and ACAS/HBSS experience. A Secret clearance with TS preferred.