Senior Information System Security Officer

Description

SAIC is seeking a technical Senior Information System Security Officer (ISSO) to support the company’s secure operating facilities in Colorado Springs, CO
. The Horizon 2 contract supports the US Space Force. The primary Government customer is Space Systems Command and its Program Offices that oversee the Space Domain Awareness and Combat Power Branches & the Battle Management Command, Control and Communications portfolios.

You will support all facets of SAIC’s Information Protection Program at our Colorado Springs location. You will assist the Information Systems Security Manager and provide oversight, guidance, and technical support, on IT and information system security issues affecting the mission of the customer, by implementing common information system security practices, policies, and standards. You will have access to information systems to perform advanced vulnerability and compliance scanning and your background in applying sound and effective Information Assurance security practices, in both Windows and Linux environments, will be the driving force behind the success of our customer missions.

This is an excellent opportunity for an experienced cybersecurity professional with a strong technical background to support the ongoing compliance of systems. Join us in safeguarding the nation's space assets and explore the limitless opportunities that await in this dynamic role. You'll have the invaluable opportunity to be mentored in this role, ensuring not only your professional growth, but also the continued excellence of our operations.

You will get to use your strong communication (verbal and written) skills and interpersonal skills in a dynamic customer centric environment, which may require sporadic off-hours support. If this is what you are looking for, keep reading.

• Conduct continuous monitoring and self-inspections of computer systems to ensure security compliance with official guidance and policy directives, and proactively report progress to management, make recommendations for security posture improvements, and ensure systems are ready for audits.
• Review and interpret security vulnerability scans, communicate their contents to management and technical stakeholders, and push them to remediation.
• Proactively report security status and concerns to management and make recommendations as appropriate.
• Participate in and support directorate responses for ongoing information system audits.
• Develop and update standard government security documentation such as System Security Plans, Contingency Plans, Interconnection Security Agreements, Risk Acceptances/Waivers, Privacy Threshold Analyses, Privacy Impact Assessments, and other ad-hoc documentation as needed.
• Review and approve/deny relevant system Change Requests as needed.
  Ensure configuration management is appropriate for all Information Systems (IS) software and hardware, in accordance with DoD STIGs (Security Technical Implementation Guides) and industry best practices.
• Execute system audit log reviews in accordance with established policy requirements using Security Information and Event Management (SIEM) tools such as Splunk, Kibana, etc.
• Assist creation of new policies/procedures as needed for directorate systems.
• Support ad-hoc data call and reporting requirements initiated by DHS CIO, CISA and other headquarters offices.

• Bachelor’s degree (preferable Information Security related), 14+ years experience (4 years of experience may be used in lieu of degree) with:
  • Cybersecurity, cyber engineering, information assurance, system administration, or equivalent combination to reflect knowledge and experience.
  • The Risk Management Framework, National Institute of Standards and Technology, Committee on National Security Systems cyber security requirements and guidance, and cyber security related risk management methodologies.
  • Expert knowledge and experience using DoD tools and capabilities for vulnerability assessments and compliance reporting (eMASS, XACTA, ACAS, STIGs, Nessus, SCAP, Splunk, etc.).
  • Mastery understanding of the JSIG, ICD 503, NIST Risk Management Framework (RMF), NIST SP 800-53/53A, and CNSSI 1253, and the Assessment & Authorization (A&A) process.
  • Successful participation Information Assurance self-inspections, ATO renewals, and Cybersecurity compliance inspections.
  • Working in a SAP and/or SCI environment.
  • Controlling, labeling, virus scanning, and appropriately transferring data…