Senior Cyber Security SME

Overview

Senior Cyber Security SME at Steampunk, Inc. Design. Disrupt. Repeat. Be an agent of change on a team committed to client-focused, mission-driven excellence. Steampunk is looking for an experienced Information Systems Security Officer (ISS0) Team Lead with an appetite for taking on new challenges.

• Lead a team of ISSOs, including prioritizing continuous monitoring schedules, performance management, and customer relationship management.
• Ensure ISSOs within the program area are properly trained on ISSO activities.
• Provide security-related expertise and mentorship to junior ISSOs within the program area.
• Support personnel management activities for the program area team.
• Ensure security requirements for the assigned major application or general support system are being or shall be met.
• Ensure that requests for security authorization (C&A) of assigned major applications or general support systems are completed in accordance with published procedures.
• Ensure protective measures for physical security threats are in place.
• Ensure compliance with all legal requirements concerning the use of commercial proprietary software (e.g., copyrights and site licenses).
• Maintain an inventory of hardware and software within the program/development offices or field site facilities.
• Coordinate the development of a Contingency Plan and ensure the plan is tested and maintained.
• Ensure risk analyses are completed to determine cost-effective and essential safeguards.
• Prepare security plans for sensitive systems and networks.
• Attend security awareness and related training programs and distribute security awareness information to the user community as appropriate.
• Report IT security incidents (including computer viruses) in accordance with established procedures.
• Report security incidents not involving IT resources to the appropriate security office.
• Provide input to IT security personnel for reports to higher authority concerning sensitive or national security information systems.

• Bachelor’s Degree in a related IT field
• Ability to obtain a U.S. government Security Clearance
• Eight years of IA experience, including at least 3 years related to FISMA

• Experience leading teams of information security professionals
• Strong knowledge of a variety of IA concepts, practices, and procedures for secure system integration and operation
• Knowledge of NIST SP 800 publications, especially risk management policy and procedures
• Extensive knowledge of financial audit standards, classified system IA requirements, Privacy Act requirements, or Critical Infrastructure Protection
• Experience evaluating systems, networks, or infrastructure security controls against FISMA, FIPS, and NIST guidelines
• Proficiency in three of the following: vulnerability scanning, OS/Network knowledge (LAN/WAN), information security principles (e.g., defense-in-depth) and supporting technologies, application/database/network security
• Ability to assess and weigh current and evolving security threats in an operational environment
• Knowledge of DHS Information Security Policy Directives and Handbooks
• Experience with Azure

• One or more professional security certifications, e.g., CISSP, CISA, CEH

• Ability to plan and accomplish goals using extensive experience and judgment
• Ability to work independently to solve problems quickly and completely
• Ability to lead effectively and direct the work of others
• Experience collaborating with Federal program stakeholders
• Experience in supporting, monitoring, testing, and troubleshooting hardware and software IA problems
• Excellent oral and written communication skills
• Management experience leading a team of security professionals

Steampunk relies on several factors to determine salary, including location, requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $125,000 to $175,000 per year. This range is a typical estimate and does not include the full Steampunk benefits package.

Identity Statement:
As part of the application process, you may be asked to participate in interviews and assessments. Steampunk is an equal opportunity employer and participates in the E-Verify program.

Seniority level:
Mid-Senior level

Employment type:

Full-time

Job function:
Engineering and Information Technology

Industries: IT Services and IT Consulting