Senior Information Systems Security Officer

LinTech Global, a Dexian company; Washington (District of Columbia); On-site; USD 150,000 - 175,000; Full time

Benefits offered by this job

Open Paid Time Off

Health Insurance with Company Contribution

401k Plan with Company Match

Employee Recognition Program

Job summary

LinTech Global, a Dexian company, seeks a Senior Offensive Security Specialist in Washington, DC. This role involves cybersecurity oversight, system management, and risk assessments.

You'll require recent A&A experience, knowledge of NIST principles, and a TS/SCI clearance. Benefits include paid time off, health insurance, and retirement plans.

Qualifications

• At least 2 years of recent experience in A&A and FISMA compliance.
• Experience with secure cloud and hybrid engineering.
• Proficient in applying NIST and security controls principles.

Responsibilities

• Manage cybersecurity activities for assigned systems.
• Coordinate implementation of cybersecurity requirements.
• Support A&A activities and maintain Security Plans.

Skills

A&A experience

FISMA compliance

NIST 800 series application

Risk management

Cybersecurity policy knowledge

Education

10+ years in cybersecurity

Tools

Continuous monitoring tools

Job description

Position Overview

Serves as DHS I&A's senior offensive security and technical assessment specialist. This position is responsible for identifying vulnerabilities, assessing system security posture, validating security control effectiveness, conducting penetration testing activities, evaluating software assurance risks, and providing actionable remediation recommendations across classified and unclassified environments.

Serves as the day‑to‑day cybersecurity lead for assigned systems and acts as the principal interface between system owners, program managers, system administrators, security engineers, ISSMs, security control assessors (SCAs), authorizing officials, and mandatory stakeholders. The mandate ensures systems remain compliant, authorized, and secure throughout their operational lifecycle.

Responsibilities

System Security Management

• Manage cybersecurity activities for assigned systems.
• Ensure systems maintain compliance with DHS and Intelligence Community requirements.
• Monitor system security posture.
• Coordinate implementation of cybersecurity requirements.
• Provide ongoing security oversight throughout the system life cycle.

RMF & Authorization Support

• Develop and maintain RMF documentation.
• Support Assessment & Authorization (A&A) activities.
• Maintain System Security Plans (SSPs).
• Assist with Security Assessment Reports (SARs).
• Manage Plan of Action and Milestones (POA&M) documentation.
• Support ATO and ongoing authorization efforts.
• Coordinate authorization package updates.
• The ISSO is typically the individual most directly responsible for maintaining authorization artifacts on a day-to-day basis.

Continuous Monitoring

• Execute continuous monitoring activities.
• Review vulnerability scan results.
• Track remediation actions.
• Monitor control effectiveness.
• Support recurring security assessments.
• Ensure systems remain compliant between authorization cycles.
• Report security posture changes to leadership.

Vulnerability Management

• Track identified vulnerabilities.
• Coordinate remediation efforts with system administrators and engineers.
• Validate corrective actions.
• Maintain POA&M records.
• Monitor remediation timelines.
• Escalate unresolved cybersecurity risks.

Audit and Compliance Support

• Support cybersecurity audits and inspections.
• Provide evidence supporting compliance assessments.
• Respond to auditor requests.
• Assist during FISMA reviews.Support OIG and Intelligence Community inspections.
• Maintain audit readiness documentation.

Security Control Management

• Verify implementation of required security controls.
• Coordinate control testing activities.
• Support Security Control Assessors during assessments.
• Validate remediation of identified findings.
• Assist in maintaining compliance with NIST and Intelligence Community control requirements.

Risk Management Support

• Identify and document cybersecurity risks.
• Participate in risk assessments.
• Support risk mitigation planning.
• Monitor residual risk.
• Coordinate with ISSMs and risk management personnel.
• Assist in preparing risk recommendations for Government review.

Stakeholder Coordination

• Coordinate with system owners regarding cybersecurity requirements.
• Support engineering and architecture reviews.
• Support implementation of new technologies.
• Facilitate communication between technical and cybersecurity stakeholders.

Stakeholder Interaction

• Information Systems Security Managers (ISSMs)
• Security Control Assessors (SCAs)
• Security Risk Management Engineers
• Cybersecurity EngineersSystem Owners
• Program Managers
• System Administrators
• Enterprise Architects
• Authorizing Officials and their representatives

Required Qualifications

• Must have at least two (2) years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering, with a total of at least 10 years of related experience.
• Experience in emerging and evolving security risk management practices, including automating A&A and continuous monitoring activities.
• Experience applying NIST 800 series and CNSSI 1253 security controls and risk management framework principles and guidance (mandatory).

Certification Requirements

• CISM + CAP or GRC.

Clearance Requirements

• TS/SCI with CI Polygraph.

Benefits

• Open Paid Time Off, 11 Federal Paid Holidays & 5 Paid Sick Days, Company‑paid Life/AD&D, Company‑paid Short Term and Long-Term Disability, Health Insurance with Company Contribution, 401k Plan with Company Match, Employee Recognition Program, Employee Referral Bonus, annual Performance Bonus, and more.

EEO Statement

Dexian Government Solutions is proud to be an equal opportunity employer. All employment is decided based on qualifications, merit, and business need. Mandatory fairness is maintained across propabilities: race, religion, color, national origin, ancestry, physical or mental disability, medical condition, pregnancy (including childbirth, lactation and related medical conditions), marital status, genetic information, gender, sexual orientation, gender identity or expression, military and veteran status, or any other status protected under federal, state, or local law where we operate.

Salary: $150,000 – $175,000 per year. Location: DC Metro area.