Information Systems Security Officer; ISSO

Iron Bow Technologies is for people who believe trust is paramount , transformation is embraced , and the future is here , because "What we do matters !

We are a next generation solutions provider, delivering mission success across government, healthcare, and commercial industries. Iron Bow relies on our passionate people ,
long standing partnerships , and strategic thinking to solve your most critical challenges.

Whether we team with clients, colleagues, or partners, we put each other first. It’s The
Iron Bow Way.

Iron Bow Technologies is seeking an experienced Information Systems Security Officer to support an existing, long-term Federal Government customer, the Department of Justice (DOJ). Our Information Systems Security Officer will provide IT Security Support to the DOJ Civil Division (CIV) including Information System Security reviews and assessments, drafting/maintaining documentation, system audits, vulnerability management, risk assessment, product evaluation, security implementation and remediation, security incidents and network security support.

This is an onsite position at the customer’s site in Washington, DC. There may be an opportunity for a hybrid schedule with up to 2 days/week remote after becoming fully engaged with the position. Candidates should be aware that a hybrid schedule can change without advance notice so that we are aligned with the customer’s expectations.

The Information Systems Security Officer participates in the review of identified new technologies or policies (e.g., Cloud Solutions fully off premise or hybrid, Continuous Diagnostic and Mitigation (CDM) technologies, anomaly-based tools, virtual environments) to determine any impact on CIV systems and report findings. You will also participate in the development of monthly, quarterly, and annual Federal Information Security Management Act (FISMA) reporting documents and recommend enhancements that will be shared with CIV IT leadership.

Responsibilities include:

• Provide technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, security implementation, and remediation.
• Extensive experience in documenting and managing Plans of Action and Milestones (POA&Ms). Proven ability to categorize security risks, prioritize corrective actions, and monitor progress toward mitigating technical and administrative vulnerabilities.
• Draft various security documents that either adhere to existing/revised standards or draft a first-time document that aligns with standards and logically includes all necessary information needed to effectively represent the system.
• Provide technical assistance in the designing and implementation of solutions for protecting confidentiality, integrity and the availability of sensitive information.
• Provide technical support and analysis in the identification, evaluation, investigation, and remediation of cyber and insider threats.
• Provide technical evaluations of CIV systems and assist with making security improvements.
• Participate in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to the CIV.
• Performs assessment of present levels of cyber security, offer recommendations on levels of risk, training personnel in proper cyber security protocols.
• Conduct security product evaluations, and recommend products, technologies and upgrades to improve the CIV systems security posture.
• Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
• Support and prepare security documentation for CIV systems for submission to designated reviewers.
• Participate in the management of accreditation of the CIV systems evaluating and certifying the implementation FISMA, the NIST security guidelines, and the Department’s plans, policies and guidelines.

• A minimum of 8 years of progressive, technical (hands-on) experience in Information Assurance C&A, including being a key contributor to the various security documents created and maintained for the system.
• Being onsite on planned days – this…