Information System Security Officer

• Detect, evaluate, and document the security configuration of developmental and operational tools and their security impacts
• Make security improvement recommendations
• Coordinate work with in-house teams, subcontractors, and vendors
• Translate customer IT needs and future goals into secure and effective solution plans
• Investigate new techniques and technologies beyond legacy approaches
• Lead teams through critical network design approaches and provide alternatives balancing security and mission needs
• Advise clients by leading discovery of cyber risks and understanding applicable policies
• Develop mitigation plans
• Oversee analysis of technical, environmental, and personnel details from subject matter experts and engineers
• Guide clients through plans of action using presentations, whitepapers, and milestones
• Translate security concepts to support client decisions for mission-critical systems
• Share cloud technology expertise with clients and team members

• 3+ years of experience as an Information System Security Officer (ISSO) or Information System Security Analyst (ISSA)
• Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
• Experience with implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
• Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels
• Experience applying security controls to the design and implementation of IT solutions to achieve an authorization to operate (ATO)
• Experience with eMASS or Xacta IA Manager
• Ability to perform risk analysis
• Active TS/SCI clearance; willingness to take a polygraph exam
• HS diploma or GED and 7+ years of experience supporting IT projects and activities, Associate’s degree and 5+ years of experience, Bachelor’s degree and 3+ years of experience, or Master’s degree and 1+ years of experience
• DoD 8570 IAT Level II Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP
• DoD 8570.01-M CSSP Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND
• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS
• Experience assessing configuration changes such as new COTS tools or web application upgrades
• Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans
• Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
• Knowledge of cloud-native security tools, including HBSS
• Knowledge of Zero Trust principles and concepts
• Ability to plan and conduct security authorization reviews and assurance case development
• Ability to work within a collaborative team and fast-paced dynamic environment
• Excellent written, organizational, presentation, and verbal communication skills
• AWS, Azure, or GCP Certification

Demonstrates expertise in security configuration management, risk analysis, and the implementation of security controls in compliance with NIST 800-53 and DoD standards. Proficient in translating complex security concepts into actionable plans for mission-critical systems while effectively communicating with clients and team members.

• Information System Security Officer (ISSO)
• NIST 800-53 Implementation
• Risk Analysis
• DoD 8570 IAT Level II Certification
• EMASS or Xacta IA Manager

• Security Configuration Management
• Configuration Analysis
• Cyber Risk Assessment
• Cloud Security Tools
• Zero Trust Principles
• COTS Tool Assessment
• Security Authorization Reviews
• Mitigation Planning
• Technical Implementation Guides
• Vulnerability Scanning

• Excellent Communication Skills
• Organizational Skills
• Presentation Skills
• Team Collaboration
• Adaptability

• DoD 8570 IAT Level II Certification
• AWS Certification
• Azure Certification
• GCP Certification
• DoD 8570.01-M CSSP Infrastructure Support Certification

• Cybersecurity
• Security Configuration
• Risk Management Framework (RMF)
• FedRAMP
• ICD 503
• Authorization to Operate (ATO)
• Mission-Critical Systems
• Cloud-Native Security
• Security Best Practices
• Government Security Guidelines

• Ansible
• Terraform
• Splunk
• STIG Viewer
• HBSS
• AWS
• Azure
• GCP
• SCAP
• ACAS