FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Systems Security Officer
E-INFOSOL LLC. Support a federal agency in verifying compliance with FISMA, NIST, DISA STIG, FIPS, and NIPS requirements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity compliance, risk management, and security authorization processes, with a strong focus on FISMA, NIST, and vulnerability management. Proficient in developing security documentation and managing information security audits while advising on security strategy and architecture.
Highest-signal resume keywords
Active Top-Secret ClearanceInformation Systems Security Officer (ISSO) ExperienceCertified Information Systems Security Professional (CISSP)Vulnerability ManagementRisk Management Framework (RMF) Activities
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Authorization ProcessesSystem Security PlansRisk AssessmentsVulnerability ScansSecurity Control MonitoringIncident Response SupportSecurity Best PracticesConfiguration StandardsContinuous Integration/Continuous Delivery (CI/CD)Cloud Computing Technologies
Soft Skills
LeadershipCommunicationAdvisory SkillsCollaboration
Tools & Technologies
Tenable NessusSplunkIBM GuardiumHP WebInspectNetwork Mapper (NMAP)GRC Application
Certifications & Qualifications
Certified Information Systems Security Professional (CISSP)Global Information Security Professional (GISP)CompTIA Advanced Security Practitioner (CASP)
Industry Keywords
FISMANISTDISA STIGFIPSNIPSInformation Assurance Management (IAM) Level IIISecurity Assessment & AuthorizationATOCOOP ExercisesInformation Security Audits
Tech Stack
Tools & technologiesCloudCyber SecuritySplunk
About the role
Key responsibilities & impact- Support a federal agency in verifying compliance with FISMA, NIST, DISA STIG, FIPS, and NIPS requirements
- Establish, implement, and maintain a lifecycle security model for information systems, services, and data
- Ensure day-to-day implementation, oversight, continuous monitoring, and maintenance of security configurations, practices, and procedures
- Lead security authorization processes and procedures
- Recommend security best practices and system configuration standards
- Manage cybersecurity posture and analysis, including vulnerability management, incident response support, and Risk Management Framework activities
- Upload security control evidence to the GRC application during the monitoring phase
- Write System Security Plans, POA&Ms, Risk Assessments, PIAs, and supporting NIST SP 800-53 documentation
- Support security Assessment & Authorization activities and achieve and maintain ATO
- Conduct information-system vulnerability scans according to risk assessment parameters
- Coordinate system-owner concurrence for corrective or mitigation actions
- Monitor security controls to maintain ATO
- Create security A&A documentation and maintain project system security procedures for the ISSM
- Review system audit trails and report information-system security incidents
- Verify users have required clearances, authorization, and need-to-know before granting access
- Manage information-security audits by federal departments/agencies and third-party auditors
- Initiate protective and corrective measures when incidents or vulnerabilities are discovered
- Interface with government managers and contractors regarding security requirements
- Support certification activities throughout the A&A process
- Oversee system recovery processes and COOP exercises
- Assess emerging network systems and enterprise-level risks and vulnerabilities
- Advise leadership on cybersecurity risk management, security strategy, project planning, and security architecture
- Liaise with security organizations regarding configuration changes to operational systems
Requirements
What you’ll need- Active Top-Secret clearance with capability to obtain SCI/CI Poly if needed to meet contract requirements
- Bachelor’s and/or advanced degree in computer science, business management or IT related discipline
- 7 years of experience serving as an Information Systems Security Officer (ISSO) or Information System Security Engineer at a cleared facility
- 9 years of work experience in a computer science or Cybersecurity related field
- Possess at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or CompTIA Advanced Security Practitioner (CASP), or other certifications exemplifying skill sets such as those described in DoD Instruction 8570.1 Information Assurance Management (IAM) Level III proficiency
- Familiarity with security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP WebInspect, Network Mapper (NMAP), and/or similar applications
- Working knowledge of Continuous Integration/Continuous Delivery (CI/CD) pipelines
- Working knowledge of virtualization and software-defined infrastructure
- Working knowledge of cloud computing technologies
Benefits
Comp & perks- Medical – company subsidized premiums for employees, including family and dependent options
- Dental and Vision
- Retirement Savings (401k) up to 4% match
- Health Savings Account (HSA), FSA and DCFSA
- Company-paid Short/Long-term disability (w/ additional supplemental options)
- Company-paid Life and AD&D (w/ additional supplemental options)
- Generous Paid Time Off and ALL 11 Federal Holidays
- Legal and Identity Protection Services
- Bonuses for certifications and reimbursement
- UberOne
- Company Outings (Sporting events, Happy Hours, etc.)
- Discounts on services including Pet Insurance
- Opportunities such as reimbursement and bonuses based on completion of certifications