Information Systems Security Officer Security Clearance

Position: Information Systems Security Officer with Security Clearance
Job type: full-time must have an active top secret clearance upon hire to be considered. We use e-verify to electronically confirm the employment eligibility of newly hired employees. Competitive salary, comprehensive benefits and a company that cares! Ausgar technologies, inc., an equal opportunity employer, is an established, service-disabled veteran-owned small business (sdvosb) department of defense, government contractor with core competencies in information assurance, cybersecurity and systems engineering.

With offices on both the east and west coasts, an inviting culture and above-standard benefits, opportunity abounds for the right individual! Information systems security officer - 26-019 – san diego, ca as a growing department of defense contractor, ausgar technologies has an exciting opportunity for an information systems security officer to to join our team of smart and innovative technical team members at niwc pac – seaside in the point loma area of san diego, ca.

The information systems security officer (isso) is responsible for implementing and maintaining cybersecurity controls for dod classified information systems in compliance with rmf, nist 800-53, stigs, national industrial security program operating manual (nispom), joint special access program implementation guide (jsig) and related cybersecurity requirements. This role supports the full assessment and authorization (a&a) lifecycle, including maintaining authority to operate (ato) packages in emass/xacta, conducting continuous monitoring (conmon), reviewing security logs and audit evidence, managing assured compliance assessment solution (acas) vulnerability scans, tracking remediation activities and plan of action milestones (poa&ms) and supporting incident response procedures.

The isso will administer security within linux, virtualized and cloud-native environments, including aws and kubernetes, while collaborating with system administrators, engineers and government stakeholders to ensure compliance and operational security. The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodations may be made to individuals with disabilities to perform the essential functions.

Required qualifications:

must have a current top-secret clearance with the ability to obtain a ts/sci security clearance. A security+ ce is required. Must have or be able to obtain within six months of hire, a dod 8570 iat level iii certification (cissp, casp+, cisa, gced, gicsp, cgrc, etc.). Bachelor's degree in cybersecurity, information technology, information systems or a related field from an accredited college or university and eight plus years of total related it/cyber experience;

or equivalent combination of education and relevant professional experience. Two plus years of experience as an isso or issm. One to two years of experience securing cloud-native environments, including aws and kubernetes, with knowledge of container security, iam, logging, monitoring, vulnerability management and compliance requirements. Experience maintaining authority to operate (ato) packages within emass or xacta and supporting rmf activities for classified systems.

Experience conducting acas vulnerability scanning, vulnerability remediation tracking and poa&m management. Experience reviewing security logs, audit records, and compliance evidence to support. Continuous monitoring (conmon) requirements. Experience implementing and maintaining security controls in accordance with nist 800-53 and dod cybersecurity requirements.

Experience with linux operating systems and command-line administration.

Experience with virtualized environments and hypervisors. Knowledge of xacta or emass. Knowledge of the a&a process for dod information systems. Knowledge of nispom, dcsa a&a; process manual, jsig, icd 503/703, stigs, rmf and associated nist publications. Knowledge of incident handling and response procedures, including data spills involving unclassified and classified systems. Previous experience within the u.s. Department of defense…