Information Systems Security Officer

Information Systems Security Officer

• Provide ongoing security consultation and guidance throughout the project lifecycle.
• Develop, update, and manage System Security Plans (SSPs) in the Cyber Security Assessment Management (CSAM) application.
• Conduct regular vulnerability assessments and penetration testing on the Dev Ops environment and embed security into the Dev Ops pipeline.
• Work closely with the App Dev team, IT operations, and other stakeholders to ensure effective security integration.
• Design and implement robust access control mechanisms, including role-based access control (RBAC) and least privilege principles.
• Develop and implement an incident response plan, including detection, containment, eradication, recovery, and lessons learned.
• Develop and document security requirements for the applications and systems.
• Establish continuous monitoring of the Dev Ops environment for suspicious activities and anomalies and create and maintain security policies, procedures, and standards.
• Support the development of privacy documentation (PTAs, PIAs) and collaborate with CISO teams on audits and assessments.
• Provide continuous monitoring, incident response, threat detection, and cyber forensics support. Conduct regular risk assessments to identify, assess, and prioritize security risks.
• Conduct thorough threat modeling for Service Now, Salesforce, Mule Soft, SharePoint, OCI, and Tableau to identify potential vulnerabilities. Define data classification and protection strategies, including encryption and data loss prevention (DLP).
• Develop and deliver security awareness training, training on secure coding practices and principles, and conduct regular phishing simulations to assess user awareness and responsiveness.
• Ensure compliance with FISMA, NIST Risk Management Framework (RMF), and other federal regulations.

Will work in various unanticipated locations throughout the U.S.

• Bachelors in Computer Science, Engineering, or related.
• 2 years of experience.