Information Security Officer

JOB SUMMARY

Specialty Systems, Inc. has an opening for an Information Security Officer (ISO) with the below described skills and experience to join our team of technical professionals supporting our Department of Defense customer at the Joint Base MDL. In this position, you will have a high-profile role in the development and qualification of systems used for the support of unique Department of Defense systems.

Ideal candidates will have a broad set of security engineering technical skills and must be able to work both individually and within a team environment. As a member of our team, you will be able to experience the professional satisfaction of playing a key role in ensuring that our Department of Defense customers' systems that have a direct impact on our country's war fighting and peace-keeping capabilities are performing at optimal levels.

The ISO provides cybersecurity and information assurance support for Navy systems, networks, and applications throughout the system lifecycle. The ISO assists with implementation, assessment, and continuous monitoring of cybersecurity controls in accordance with the DoD Risk Management Framework (RMF), NIST SP 800-53, DoD 8500/8510 series, and applicable Navy cybersecurity policies. Working closely with system engineers, system administrators, and program leadership, the ISO supports activities required to achieve and maintain Authority to Operate (ATO) of labs and programs, while ensuring compliance with cybersecurity requirements and protection of sensitive Navy information systems.

The ISO contributes to system security documentation, vulnerability management, and cybersecurity compliance activities supporting operational Navy systems and development environments.

This position is located at our customer site at Joint Base MDL. In this position, you will work our customer's Compressed Work Schedule which consists of working four 9-hour days (M-Th) and an 8-hour day (F) for the first week of a cycle followed by four 9-hour days (M-Th) and being off on the second Friday for the second week of a cycle.

This results in a 3-day weekend every other week!

• Cybersecurity Compliance & RMF Support.
  • Support implementation of the DoD Risk Management Framework (RMF) process for Navy information systems.
• Assist in development and maintenance of RMF documentation.
• Assist with system categorization, control selection, and implementation validation in accordance with NIST SP 800-53.
• Coordinate with Authorizing Officials (AO), ISSMs, ISSOs, and system owners to support ATO packages.
• Vulnerability Management & Continuous Monitoring.
  • Monitor cybersecurity vulnerabilities and assist with remediation planning.
• Track vulnerabilities and corrective actions through POA&M management.
• Assist with enforcement of DoD and Navy cybersecurity policies.
• Develop and update software requirements, design documents, and test procedures. Working closely with system administrators, developers, and network engineers to implement cybersecurity controls.
• Must maintain certifications required for position.

• A BS/BA degree in Computer Science, Software Engineering, Electrical Engineering, or a related STEM field is preferred. Equivalent work experience is acceptable in lieu of a degree.
• Must have a Secret level or higher clearance or be able to obtain a Secret Clearance.
• Must have at least 3 or more years’ experience cybersecurity or information assurance experience supporting DoD or federal systems.
• Security+ CE or the ability to obtain certification within 3-6 months.
• Must achieve CWF status.

• Experience supporting DoD Risk Management Framework (RMF) activities.
• Knowledge of NIST SP 800-53 security controls and DoD cybersecurity policies.
• Experience with vulnerability scanning tools (ACAS/Nessus) and STIG implementation.
• Familiarity with cybersecurity documentation required for ATO packages.
• Experience supporting Dev Sec Ops  environments.
• Experience with both containerized and virtualized environments.
• Understanding of continuous monitoring and cyber readiness reporting.
• Individuals should be self-starters able to work with little supervision to support…