Information Systems Security Officer - Citadel

Referral bonus: $1,000

Semper Valens Solutions is seeking a Security Analyst to join our cybersecurity team as an Information Systems Security Officer (ISSO).

Full Time, Ft. Meade, MD

Secret clearance required.

Position contingent upon contract award.

• Responsible for continuous monitoring activities for systems, including monitoring for security threats, performing access reviews, reviewing and developing mitigation for vulnerability assessment reports, and proposing enhancements for system security.
• Support security operations centers (or similar capabilities) in system reviews and potential incident investigations.
• Maintain knowledge of the security architecture and the business purpose of systems.
• Document and maintain knowledge of all relevant NIST 800-53 controls for each IT system for which the ISSO is responsible.
• Update SSPs semi-annually and document any changes.
• Certify the accuracy of continuous monitoring information for assigned systems.
• Advise on proposed architecture or configuration changes using the established change and configuration management process.
• Certify software planned for the production environment is evaluated and provide guidance regarding its risk impact.
• Support the agency on periodic internal and external audits, including support for the execution of identified corrective action plans as needed.
• Evaluate and advise on all access requests for privileged accounts to IT systems.
• Support and produce any artifacts required for ongoing authorization and the NIST Cyber Security Framework (CSF).
• Perform certification assessments for assigned programs, including review of change requests, ports, protocols, and services; whitelist requests; self-assessment results; statements of compliance; scanning and STIG reviews; systems security plans; cybersecurity control evidence and artifacts; and on-site review results.
• Attend weekly training sessions and staff meetings to understand changes or clarifications to procedures.
• Use a variety of tools, including the government-provided resourcing tool, eMASS, Requirement Tracking System (RTS), PPSM database, Whitelist Tool, DoD Information Technology Portfolio Repository (DITPR), and RMF Knowledge Service.
• Conduct security architecture reviews to ensure compliance with STIG requirements and best practices, incorporated into risk analysis and certification recommendations.
• Develop customized checklists based on security architecture, special-purpose equipment, accredited deployment guides, Unified Capabilities Approved Product List deployment guides, and required ancillary equipment.
• Analyze Plans of Action and Milestones (POA&M) and mitigation plans for unresolved findings to determine residual risk, documenting technical justifications as needed.
• Conduct risk assessments to analyze threats, vulnerabilities, and potential impact on the user communities and mission of the organization.

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• At least 10 years of experience performing or supporting the responsibilities of an ISSO in a U.S. Government environment.
• At least 10 years of experience with NIST cybersecurity standards and best practices.
• One of the following certifications: CISSP, CISM, CompTIA Security+.
• Knowledge of U.S. Government security regulations and methodologies: FISMA, FedRAMP, NIST special publications.
• Minimum Secret security clearance.
• U.S. Citizen.

Semper Valens Solutions is an Equal Opportunity Employer. We provide equal opportunity for all employees and applicants without discrimination on the basis of race, color, sex, religion, age, sexual orientation, gender identity, national origin, marital or parental status, pregnancy or childbirth, disability, genetic information, status as a disabled veteran, recently separated veteran, active-duty wartime or campaign badge veteran, armed forces services medal, or any other characteristic protected by law.

Applicants may require reasonable accommodation to apply for a position with Semper Valens Solutions. Human Resources are available for assistance.