[Hiring] Information System Security Officer @E-Infosol LLC

Role Description

E-INFOSOL LLC is seeking a highly motivated Data Scientist to be a full-time and fully remote employee to join our innovative and customer solutions focused team.

The Senior Information System Security Officer (ISSO) supports a federal agency in verifying compliance with various security standards and frameworks.

• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for the customer’s information system(s).
• Lead security authorization processes and procedures. Recommend security best practices and system configuration standards.
• Take full responsibility of cybersecurity posture and analysis to include vulnerability management, incident response support, and Risk Management Framework.
• Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application to support security control implementation during the monitoring phase.
• Write System Security Plans, POA&Ms (Plan of Actions and Milestones), Risk Assessments, PIAs (Privacy Impact Analyses), and supporting documentation for systems subject to NIST SP 800-53.
• Support FBI security Assessment & Authorization (A&A) activities. Achieve and maintain ATO (Authority to Operate), as required.
• Conduct required IS vulnerability scans according to risk assessment parameters.
• Working knowledge of Continuous Integration/Continuous Delivery (CI/CD) Pipelines, virtualization, software-defined infrastructure, and cloud computing technologies.
• Coordinate system owner concurrence for correction or mitigation actions.
• Monitor security controls for the customer’s information system(s) to maintain security Authorized To Operate (ATO).
• Create security A&A documentation for CODIS and maintain the project system security procedure for the Information System Security Manager (ISSM).
• Review system audit trails, and report all information system security incidents through the appropriate channels.
• Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before granting access to the Information System.
• Manage Information Security Audits by federal departments/agencies, including third party auditors.
• Report all security-related incidents to the ISSM.
• Initiate, with the approval of the ISSM, protective and corrective measures when a security incident or vulnerability is discovered.
• Interface with appropriate government managers and contractors to ensure understanding of and compliance with security requirements.
• Participate in CCBs and advise on the security impacts of all proposed changes and software requirements.
• Familiarity with the use and operation of security tools including Tenable Nessus, AppDetectivePro, HP WebInspect, Network Mapper (NMAP), and/or similar applications.
• Support certification activities throughout the A&A process.
• Oversee system recovery processes as well as Continuity of operations (COOP) exercises.
• Assess emerging network system and enterprise-level risks and vulnerabilities. Advise leadership on cybersecurity risk management, security strategy, security project planning, and security architecture.
• Advise and conduct liaison with appropriate security organizations on security status of configuration changes to the operational system.

Qualifications

• Active Top-Secret clearance with capability to obtain SCI/CI Poly if needed to meet contract requirements.
• Bachelors and/or Master’s degree in Computer Science, Management Information Systems, or related computer science technical degree.
• CompTIA Security+ or (ISC)² Security Certified Practitioner (SSCP), (ISC)2 CISSP, or higher certification.

Benefits

• Medical – 100% company paid premiums for employees with dependent options.
• Dental and Vision.
• Retirement Savings (401k) up to 4% match.
• Health Savings Account (HSA), FSA and DCFSA.
• Company-paid Short/Long-term disability (with additional supplemental options).
• Company-paid Life and AD&D (with additional supplemental options).
• Generous Paid Time Off and ALL 11 Federal Holidays.
• Legal and Identity Protection Services.
• Bonuses for certifications and reimbursement.
• Employee Perks: UberOne, Company Outings (Sporting events, Happy Hours, etc.), Discounts on services including Pet Insurance.