Senior Information Systems Security Officer

TapHere! Technology, LLC; Washington; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive health care package

Fitness/gym membership reimbursement

401K matching

Four weeks Paid Time Off

Ten Paid Holidays

Profit Sharing

Tuition Reimbursement up to $2500 p/yr

Job summary

A technology solutions provider is seeking a Senior Information Systems Security Officer to design and implement security measures to protect systems and networks. This role requires expertise in Linux engineering, Docker, and Kubernetes alongside cloud security solutions. The candidate should have extensive experience and relevant certifications. Competitive benefits including health care, 401K matching, and paid time off are offered.

Qualifications

• Minimum of 8 years relevant experience or 5 years with an advanced degree.
• Certification in DoD 8570/8140 IAT level II is required.
• Possession of relevant cloud and security certifications.

Responsibilities

• Design and manage security solutions in a hybrid environment.
• Research and recommend technical solutions for compliance.
• Implement security solutions using Docker and Kubernetes.
• Conduct risk and vulnerability assessments.
• Collaborate with IT professionals to integrate security.
• Mentor team on cybersecurity best practices.

Skills

Incident response background

Linux/Unix Administration

Docker and Kubernetes

Scripting languages (Bash, Python, Go, Rust)

DISA STIGs application

Infrastructure as code (IaC)

DevOps tools (Jenkins, Git, Ansible, Terraform)

Problem-solving skills

Effective communication skills

Education

Bachelor's Degree or equivalent experience

DoD 8570/8140 IAT level II Certification

AWS DevOps Professional or equivalent

Certified Kubernetes Security Specialist

GIAC Cloud Security Automation (GCSA)

Certified DevSecOps Professional (CDP)

Job description

Job Title: Senior Information Systems Security Officer

Location: Ft. Washington, MD

Clearance: TS Required

Travel: Minimal

Description: Senior Information Systems Security Officer with a deep understanding of implementing various security measures to protect an organization's computer systems and networks. This role requires a strong foundation in Linux engineering and containerization technologies, as well as proficiency in applying DISA Security Technical Implementation Guides (STIGs) and operating within applications and data. The successful candidate will have a proven track record of successfully designing and implementing security solutions in cloud environments and will be able to work collaboratively with other IT professionals to ensure the security of the organization's systems and data.

Responsibilities

• Design, deploy, and manage security solutions (Scanning, IDS/IPS, NIDS/NIPS, SIEM) in a hybrid environment.
• Research and recommend technical solutions to various controls by understanding NIST 800-53 Risk Management Framework (RMF) and CNSSI 1253 & assist in developing policies, procedures and guidelines.
• Lead the effort in closing out Plan of Action & Milestones (POA&M) items that are associated with technology-related control items and findings.
• Responsible for implementing security solutions within container orchestration technologies such as Docker and Kubernetes.
• Conduct risk assessments and vulnerability assessments via implementing CI jobs to scan for various security defects such as SAST, DAST & container scanning.
• Apply DISA STIGs to ensure compliance with security standards and policies.
• Collaborate with other IT professionals to ensure that security is integrated into all aspects of the organization's IT infrastructure.
• Stay abreast of latest security threats, tools and techniques and recommend defense in depth strategies to mitigate risk to the organization.
• Provide mentorship and guidance to the team on cybersecurity best practices and basic cyber hygiene.

Experience Required

• Bachelors Degree or equivalent experience and minimum 8 years prior relevant experience, or an Advanced Degree in a related field and minimum 5 years experience.
• Possess and maintain relevant DoD 8570/8140 IAT level II Certification.
• Possess one or more of the following certifications: AWS DevOps Professional, Certified Kubernetes Security Specialist, GIAC Cloud Security Automation (GCSA), Certified DevSecOps Professional (CDP).

Skills Required

• Preferred candidate has a background in incident response and/or DevSecOps.
• Solid understanding of Linux/Unix Administration.
• Experience with containerization and orchestration technologies, particularly Docker and Kubernetes.
• Proficient in one or more computer programming languages commonly used in scripting & automation. IE: Bash, Python, Go, Rust
• Proficient in applying DISA STIGs within cloud and containerized environments.
• Demonstrated experience in automating deployments and developing infrastructure as code (IaC).
• Strong background in DevOps practices and tools, including Jenkins, Git, Ansible, and Terraform.
• Excellent problem-solving skills and the ability to work in a fast-paced, evolving environment.
• Effective communication skills, both written and verbal, with the ability to present technical information to a non-technical audience.

Benefits

• Competitive health care package, paid for by the company
• Reimbursement for fitness/gym membership
• 401K matching
• Four (4) weeks Paid Time Off (160 Hrs. PTO)
• Ten (10) Paid Holidays
• Profit Sharing
• Tuition Reimbursement up to $2500 p/yr

We maintain a drug-free workplace and perform pre-employment substance abuse testing to include background checks.