Information Security Systems Officer
Fairfax, VA
Applications have closed
CSA
Discover how CSA can support your organization's mission with our world-class technology, mission, training, simulation and cybersecurity solutions.Responsbilities
- Design the protection and security controls at an organizational level for CSA’s data, networks, systems, and sites.
- Establish, implement, and manage security policies, procedures, and practices in support of compliance objectives and CSA’s mission and goals.
- Create and maintain documentation in support of the Information Security Management System (ISMS).
- Take corrective action to resolve problems identified to ensure CSA business critical systems are operated and maintained in accordance with established policies, procedures and industry best practice.
- Manage and update configuration items (CI) such as information system or enterprise software, hardware and firmware by making changes considering the impact and risk.
- Prepare and review documentation including and not limited to information security policies, procedural documents, System Site Security Plans (SSPs), Risk Assessment plans and security incident reports.
- Review, document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
- Continually assess and perform security reviews to identify gaps or areas of improvement to validate controls or further solidify CSA’s security posture.
- Establish a plan of actions and milestones (POAM)or remediation plans are in place for vulnerabilities identified.
- Develop, initiate, and schedule necessary security activities to comply with CMMC, NIST 800-171, ISO 27002.
- Identify, assess, and advise on cybersecurity control compliance and associated insider/user alerts and risks. Escalate alerts and risks for further review and communicate any trends, findings or concerns as needed.
- Conduct Business Impact Analysis on risks discovered by vulnerability, compliance scans, or other audit activity and make determinations and recommendations on severity and priority.
- Provides support for administrative requirements to include formal and informal security documentation.
- Design, implement, and support security testing and analysis of Information Systems to evaluate the efficacy of security policies utilizing IT applications and resources in place or providing rationale and recommendations for any new resources.
- Implement/Install security measures and software to protect systems and information infrastructure including firewalls and data encryption programs.
- Maintain a broad knowledge of current and emerging security threats and how to prepare of the mitigation of such threats if applicable in CSA’s infrastructure.
- Administer the connection between systems/data sources to ensure logs are collected from systems and devices across the organization into the existing SIEM for analysis, review to guarantee measurable and actionable outcomes that contribute to the overall security and performance of the ISMS.
- Initiate, review and facilitate configuration changes as part of the organization Change and Release process.
- Assist with the delivery of various quarterly reports such as audit results and account and endpoint status and compliance.
- Promote and take part in the organization wide effort to maintain compliance with NIST, CMMC and ISO methodologies.
- Examine reports on phishing simulations, follow up communication and reporting to Leadership and other functional areas to promote and encourage Security Awareness within the organization.
- Where appropriate, offer expertise in fine tuning systems alerts to reduce administrative burden and increase efficiencies/prioritization.
- Schedule and execute tabletop incident response exercises, conducting investigations into security incidents following defined Incident Response procedures.
- Work collaboratively with the IT Team, partners, and external suppliers, to ensure the organization's security systems are up to date, documented, and implement plans and execute assigned security-related tasks.
Required Qualifications
- 10+ years of experience with Network Administration and configuring network equipment both on-prem and cloud-based
- 5+ years administrative level experience in areas of Microsoft 365 including but not limited to: Azure AAD/ATP, Security, Compliance, Endpoint Manager, MS Defender.
- 2+ years in IT security, demonstrating a strong understanding of security fundamentals.
- Fundamental awareness of Common Vulnerabilities and Exposures (CVE)
- Competent in information security within systems, devices and corresponding frameworks that pertain to safeguarding classified and proprietary information, information security posture and controls (i.e. CMMC, NIST 800-171, ISO 27002)
- Bachelor's Degree
- 5+ years of experience with Network Administration and configuring network equipment both on-prem and cloud-based
- 2+ years in IT security, demonstrating a strong understanding of security fundamentals.
- 2+ years of experience with the Microsoft 365 cloud suite including Office, Teams/Skype for Business, SharePoint, and OneDrive.
Preferred Qualifications
- Evidence of being detail oriented with strong critical thinking in areas of IT process analysis/ process improvement.
- Experience with SOP, Policy, and Procedure writing.
- Experience with NIST System Security Plans and POAMs
- Foundational knowledge in Data Loss Protection and Privileged Access Management.
- IT Project Management experience supporting an SMS or ISMS.
- Security Operations experience with operating systems, or cloud infrastructures and
- Experience creating and fine-tuning SIEM content such as correlation rules, reports, dashboards, filters, channels, and integrating threat intelligence to improve accuracy and visibility to potential threats and alerts.
- Experience creating and delivering Security Awareness Training at an organizational level.
- Ability to obtain a security clearance, if required.
- US Citizen
Certificate
- One or more of the following certifications:
- Security CE GIAC Security Essentials Certification (GSEC)
- Security Certified Network Professional (SCNP)
- System Security Certified Practitioner (SSCP)
- CompTIA Security+
- Microsoft Certified: Azure Security Engineer Associate
- MCITP (Enterprise Administrator)
- Microsoft Certified IT Professional (MCITP)
- Microsoft Certified Systems Administrator (MCSA)
- Microsoft Certified Systems Engineer (MCSE)
- Experience with internal or external security audits
Physical Demands
- Work Environment and Physical Requirements
- Travel demands may include local and long-distance travel to and from the client site as required by the client.
- Prolonged periods of sitting at a desk and working on a computer may be required.
- May be required to lift up to 50 pounds at times.
This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.
Applicants may need to meet eligibility requirements for access to classified information; an active United States Department of Defense security clearance or the ability to obtain one may be required for this role.
As a federal contractor, CSA is subject to any federal vaccine mandates or other customer vaccination requirements. All new hires are required to report their vaccination status.
WE BELIEVE great companies know who they are and what they stand for. CSA’s common purpose and core values were purposefully developed to create a culture focused on unlocking the full potential of our people—so they are inspired to solve our clients’ toughest challenges. It’s no secret, we owe the past 18 years of our success to our outstanding and ambitious team members. To support our hard working team, we offer an environment focused on learning and growth, an awesome benefits package, and opportunities to build a long and successful career. We are constantly on the hunt for talented, forward-thinking problem solvers with an energetic attitude and a strong work ethic to join our elite team of CSAers.
Be a part of CSA… do great things!
CSA is a Federal Contractor and an Equal Opportunity/Affirmative Action Employer.
If you are an individual with a disability and would like to request a reasonable workplace accommodation for any part of our employment process, please send an email to hr@csaassociates.com. Please indicate the specifics of the assistance needed. Assistance is reserved for individuals who are requesting a reasonable workplace accommodation. It is not intended for other purposes or inquiries. We’re an equal opportunity employer that empowers our people no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or veteran status or other protected characteristic.
Federal Equal Opportunity is the LawFederal Employee Rights under FMLAFederal Employee Polygraph Protection ActE-Verify Participation Poster (uscis.gov)If you are a California resident applying for a job, you consent to our California Job Applicant Privacy Notice.
Notification for current or previously cleared professionals:
Official U.S. Government information appearing in the public domain shall not automatically be considered UNCLASSIFIED or approved for public release. CSA recognizes that information contained in resumes of current or previously cleared professionals may be sensitive, contain potentially proprietary and/or protected information. Protected Information is considered classified, in the process of a classification determination, or unclassified, but protected by statute. Therefore, all resumes should be approved for public release by a U.S. Government Official with Original Classification Authority, prior to posting the resume to CSA’s applicant tracking system.By submitting my resume, I understand that I am NOT authorized to upload content with Official U.S. Government information that is considered, sensitive, proprietary, or protected.
Tags: Audits Azure Clearance Cloud CMMC Compliance CompTIA Encryption Firewalls GIAC GSEC Incident response ISMS ISO 27002 NIST Polygraph Privacy Risk assessment Security Clearance SharePoint SIEM SSCP System Security Plan Threat intelligence Vulnerabilities
Perks/benefits: Career development Equity Flex vacation Health care
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Security Operations Engineer jobs
- Open Information Security Specialist jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Manager Pentest H/F jobs
- Open Senior Information Security Analyst jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Principal Security Engineer jobs
- Open Product Security Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Cybersecurity Analyst jobs
- Open IT Security Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open Cybersecurity Consultant jobs
- Open Senior Information Security Engineer jobs
- Open Consultant SOC / CERT H/F jobs
- Open Security Specialist jobs
- Open Cybersecurity Specialist jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Sr. Security Engineer jobs
- Open Senior Security Architect jobs
- Open IT Security Engineer jobs
- Open CISM-related jobs
- Open ISO 27001-related jobs
- Open Network security-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open Windows-related jobs
- Open Pentesting-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open DevOps-related jobs
- Open Security assessment-related jobs
- Open Kubernetes-related jobs
- Open Security Clearance-related jobs
- Open Malware-related jobs
- Open CI/CD-related jobs
- Open IDS-related jobs
- Open DevSecOps-related jobs
- Open CEH-related jobs