Information System Security Officer (ISSO)
Alexandria, Virginia, United States
Positions Available: 2 - ICC
Remote Capability: TBD
Clearance Requirement: Top Secret/SCI, Active (1 TS & 1 TS/SCI Needed)
Avint is seeking an experienced ISSO to support a Federal Agency contingent award starting June 2022. This position is responsible for assisting the government in the assessment process for all new and legacy systems to determine the security requirements associated with each system. The ISSO shall interact with both technical and non-technical personnel in order to conduct a comprehensive review of a system, network or application. This is a technical role requiring moderate to advanced knowledge of security engineering, the ATO process, enterprise monitoring, and incident response. The ISSO shall assist in building or refining the program to achieve the assessment process. The ISSO shall work with various elements of the cybersecurity team to understand roles, missions and requirements in order to inform this process.
Requirements
- Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support IT security goals and objectives and reduce overall organizational risk.
- Work with Information Assurance Engineers and other cyber security personnel to identify, implement, assess, and manage cyber security capabilities and services.
- Collect and maintain data needed to meet system cybersecurity reporting.
- Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed.
- Identify IT security program implications of new technologies or technology upgrades.
- Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise’s cybersecurity program.
- Participate in the development or modification of the computer environment cybersecurity program plans and requirements.
- Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
- Support remediation actions associated with findings from inspections and evaluations.
- Support efforts to ensure that systems, networks, and data users are aware of, understand, and adhere to system security policies and procedures.
- Support various compliance reports for dormant accounts, account configurations, active directory group policies, server configurations, and more.
- Assure successful implementation and functionality of security requirements and appropriate IT policies and procedures that are consistent with the organization's mission and goals.
- Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
- Continuously validate the organization against policies, guidelines, procedures, regulations and laws to ensure compliance.
Technical Areas of Expertise
- NIST 800.53, 800.171, RMF Framework and Cybersecurity Framework
- Developing System Security Plans, Disaster Recovery Plans, and similar documentation required for RMF.
- Understanding of industry security and compliance statuses, standards, and policies.
Qualifications
- Bachelor’s degree in a related field or technical discipline, or 4-7 years of equivalent work experience in similar roles within the DoD or Federal Government, such as serving as an ISSO at a cleared facility.
- Security + or another relevant IAT Level II Certification; IAT Level III: CISA, CISSP preferred.
- Must possess a strong working knowledge of Information Assurance concepts, to include Assessment and Authorization (A&A) activities, general IT system functions, documented security policies and best practices, standard technical security safeguards and other core competencies such as: vulnerability management, network management, risk management, threat analysis, operating systems, enterprise architecture, policy management, encryption, system hardening etc.
Benefits
Joining Avint is a win-win proposition! You will feel the personal touch of a small business and receive BIG business benefits. From competitive salaries, full health, a unique 401K plan, and generous PTO and Federal Holidays.
Additionally, we encourage every Avint employee to further their professional development. To assist you in achieving your goals, we offer reimbursement for courses, exams, and tuition. Interested in a class, conference, program, or degree? Avint will invest in YOU and your professional development!
Avint is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity and Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
Explore more Cyber Security career opportunities
Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cybersecurity in general, filtered by job title or popular skill, toolset and products used.
- Open Cyber Security Engineer jobs
- Open Staff Application Security Engineer jobs
- Open Penetration Tester jobs
- Open Senior DevSecOps Engineer jobs
- Open Application Security Engineer/Architect jobs
- Open Senior Security Operations Engineer jobs
- Open Cyber Threat Intelligence Analyst jobs
- Open Staff Security Engineer jobs
- Open Head of Information Security jobs
- Open Lead Security Engineer jobs
- Open SOC Analyst jobs
- Open Cyber Security Analyst jobs
- Open Information System Security Officer (ISSO) jobs
- Open Cybersecurity Engineer jobs
- Open Senior Information Security Engineer jobs
- Open Senior Penetration Tester jobs
- Open Sr. Security Engineer jobs
- Open Cloud Security Automation Specialist jobs
- Open Senior Threat Intelligence Analyst jobs
- Open Offensive Security Engineer jobs
- Open Information Security Officer jobs
- Open Cloud Security Operations Lead jobs
- Open Azure Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open DevOps-related jobs
- Open Application security-related jobs
- Open Analytics-related jobs
- Open Audits-related jobs
- Open PCI-related jobs
- Open OWASP-related jobs
- Open Threat intelligence-related jobs
- Open Clearance-related jobs
- Open Security assessments-related jobs
- Open IDS-related jobs
- Open Forensics-related jobs
- Open JavaScript-related jobs
- Open Splunk-related jobs
- Open Ruby-related jobs
- Open CEH-related jobs
- Open Encryption-related jobs
- Open CISM-related jobs
- Open GDPR-related jobs
- Open Agile-related jobs
- Open Open Source-related jobs
- Open Threat detection-related jobs
- Open OSCP-related jobs
- Open Intrusion detection-related jobs
- Open Machine Learning-related jobs
- Open DevSecOps-related jobs