Information System Security Manager Level 3 Job at Columbia Technology Partners (Annapolis Junction)

Information Systems Security Officer Level 3

Provide comprehensive support to an organization's information assurance and cyb...

Location

United States , Annapolis Junction

Salary:

Not provided

Columbia Technology Partners

Expiration Date

Until further notice

Requirements

Ten (10) years of combined experience in IT, cybersecurity, or security authorization
Experience in at least two of the following areas: Security tools and technologies
Hardware/software security implementation
Communication protocols
Encryption tools and techniques
Familiarity with commercial security products, security authorization processes, incident management, PKI, and related authorization services
Bachelor's degree in Computer Science or a related field (e.g., Engineering, Mathematics, Cybersecurity, Information Technology, Information Assurance, Information Security, Information Systems)
In lieu of a bachelor's degree, four (4) additional years of relevant experience may be substituted
U.S. Citizenship is required for all applicants
DoD 8570 compliance with IAM I is required

Job Responsibility

Support the development, implementation, coordination, and enforcement of information system security policies, standards, and methodologies
Maintain the operational cybersecurity posture for assigned systems, programs, or enclaves
Assist in the daily security operations of information systems and manage their security-related aspects
Evaluate security tools and configurations to ensure compliance with requirements for processing classified information
Conduct vulnerability assessments and risk analyses to support system authorization efforts
Provide configuration management (CM) for security-relevant hardware, software, and firmware
Manage system changes and assess associated security impacts
Prepare, update, and review cybersecurity documentation such as System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in accordance with NIST RMF guidelines
Assist senior ISSOs with implementing and enforcing security policies and procedures

What we offer

Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
Vision + Dental: Both free to you + paid in full by CTP
Retirement: 401k - 6% company contribution
PTO + Leave: A work life balance is extremely important to our team here at CTP, which is why our paid time off plans are so lucrative. Offering customizable leave plans to meet your needs is just one of our many perks! Jury Duty, Bereavement + Military Leave provided
Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
Life and AD&D Insurance/Short-Term & Long-Term Disability: More peace of mind, at zero cost to you
Profit Sharing Bonus: End of year cash gets added to your bottom-line
Referral Bonus Program: Our tiered program provides an incentive with each stage of the hiring process your referral passes. Our bonuses range from $7,000-$20,000, if your referral joins the team

Fulltime

Information Systems Security Officer Level 3

Provide support for a program, organization, system, or enclave's information as...

Location

United States , Annapolis Junction

Salary:

Not provided

Columbia Technology Partners

Expiration Date

Until further notice

Requirements

Ten (10) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
communication protocols
or encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required
In lieu of a Bachelor's degree, four (4) additional years of work-related experience may be substituted
U.S. Citizenship is required for all applicants
All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
Employment is contingent upon successful completion of a security background investigation and polygraph

Job Responsibility

Provide support for a program, organization, system, or enclave's information assurance program
Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
Evaluate security solutions to ensure they meet security requirements for processing classified information
Perform vulnerability/risk assessment analysis to support security authorization
Provide configuration management (CM) for information systems security software, hardware, and firmware
Manage changes to system and assess the security impact of those changes
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)

What we offer

Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
Vision + Dental: Both free to you + paid in full by CTP
Retirement: 401k - 6% company contribution
PTO + Leave: Offering customizable leave plans
Jury Duty, Bereavement + Military Leave provided
Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
Life and AD&D Insurance/Short-Term & Long-Term Disability: at zero cost to you
Profit Sharing Bonus: End of year cash gets added to your bottom-line
Referral Bonus Program: Our bonuses range from $7,000-$20,000

Fulltime

New

Journeyman Information System Security Officer

Journeyman Information System Security Officer at Hill AFB, Utah supporting the ...

Location

United States , Hill AFB, Utah

Salary:

Not provided

Astrion

Expiration Date

Until further notice

Requirements

Must have and be able to maintain an active Secret clearance
Must be a US citizen
IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional)
Bachelor's or Master's Degree in a related field and at least 3 years of experience discipline being performed, 3 of which must be in the DoD, OR 7 years of directly related experience, 5 of which must be in the DoD
CISSP or equivalent certification
Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance
Experience using eMASS for authorization packages, artifact management, and accreditation support
Vulnerability assessment and risk mitigation analysis
STIG/SRG implementation and configuration management
Security audits, assessments, and incident response support

Job Responsibility

Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM)
Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools
Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews
Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions
Conduct security evaluations, audits, and reviews
support development of system contingency and disaster recovery plans
and promote user compliance with cybersecurity policies and training requirements
Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start
Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations
Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience

What we offer

Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule

Fulltime

New

Information System Security Officer (ISSO)

Astrion has an exciting opportunity for an INFORMATION SYSTEM SECURITY OFFICER (...

Location

United States , Eglin Air Force Base

Salary:

Not provided

Astrion

Expiration Date

Until further notice

Requirements

Active SECRET clearance. Must be eligible for a TOP SECRET clearance. Must be a U.S. citizen.
Requires 3 to 10 years of relevant experience
Bachelor’s or Master’s degree in the applicable discipline.
6 years work experience may be substituted for a Bachelor's Degree
OR Associate’s degree plus 4 years work experience may be substituted for a Bachelor's Degree
OR Bachelor's Degree plus 8 years work experience may be substituted for a Master's Degree
OR 12 years work experience may be substituted for a Master's Degree.
This skill level typically works on high-visibility or mission critical aspects of a given program and performs all functional duties independently.
CompTIA Security+ certification is required. Other certification may be required based on constantly changing requirements.

Job Responsibility

Serve as an Information Systems Security Officer (ISSO) overseeing the cybersecurity posture and compliance of critical mission systems.
Execute the Risk Management Framework (RMF) lifecycle, adhering to the DoD Joint SAP Implementation Guide (JSIG), and securing Authorities to Operate (ATOs) for Information Systems (IS).
Develop, update, and maintain System Security Plans (SSPs), managing Plans of Action and Milestones (POA&Ms), and conducting continuous monitoring of classified and unclassified networks.
Ensure systems comply with information security policies, Federal Information Security Management Act (FISMA), National Institute of Standards and Technology (NIST) controls, and applicable DoW/DoD regulations.
Integrate security by design, advising software developers, system administrators, and project leaders on secure architecture, hardware/software compatibility, and vulnerability mitigation.
Design and review security audit routines, analyze complex security incidents, and perform risk assessments on new technologies and system modifications.
Work to achieve quality improvement in security processes and take a proactive approach to customer assistance.
Maintain an up-to-date awareness of emerging cyber threats and technologies to predict future security requirements.
Knowledge of Information Assurance (IA) and Cybersecurity principles, concepts, and methods sufficient to evaluate new and emerging IT security technologies and ensure their successful integration into the existing and anticipated infrastructure.
Knowledge of the Risk Management Framework (RMF), DoD JSIG, NIST SP 800-53 security controls, and FISMA requirements to guide systems through the assessment and authorization (A&A) process and maintain continuous ATO status.

What we offer

Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule

Fulltime

New

Information System Security Officer (ISSO)

DCS has an exciting opportunity for an Information System Security Officer (ISSO...

Location

United States , Ogden

Salary:

Not provided

DCS Corporation

Expiration Date

Until further notice

Requirements

U.S. citizenship is required
Must have and be able to maintain Active Secret Clearance
Bachelor's or master's Degree in a related field and at least 8 years of experience discipline being performed, 3 of which must be in the DoD, OR, 7 years of directly related experience, 5 of which must be in the DoD
IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional (CISSP), or equivalent certification)
Must maintain required cybersecurity certifications in accordance with AFMAN 17‑1303
Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance
Experience using eMASS for authorization packages, artifact management, and accreditation support
Vulnerability assessment and risk mitigation analysis
STIG/SRG implementation and configuration management
Security audits, assessments, and incident response support

Job Responsibility

Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM)
Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools
Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews
Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions
Conduct security evaluations, audits, and reviews
support development of system contingency and disaster recovery plans
and promote user compliance with cybersecurity policies and training requirements
Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start
Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations
Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience

Information System Security Officer (ISSO) - Junior

Junior Information System Security Officer (ISSO) LOCATION: Eglin AFB, FL JOB ...

Location

United States , Eglin Air Force Base

Salary:

Not provided

Astrion

Expiration Date

Until further notice

Requirements

Bachelor's or Master's Degree. Relevant experience may be substituted for the degree.
3 years relevant experience.
Active Secret Clearance. Top Secret Eligible. US Citizenship is required.
Certifications: DoD 8570/8140 IAT Level II
CompTIA Security+ CE or equivalent
Minimum one year's experience with Enterprise Mission Assurance Support Service (eMASS)
Experience in information security roles, preferably in a military or defense environments. This may include experience in areas such as cybersecurity, information assurance, network security, or system administration.
Thorough understanding of Department of Defense (DoD) security regulations, policies, and guidelines, including DoD Instruction 8500 series, DoD 8570/8140 requirements, and Risk Management Framework (RMF) processes.
Proficiency in risk management methodologies and techniques, including risk assessment, risk analysis, and risk mitigation strategies, to effectively safeguard information systems and data assets.
Strong technical skills in areas relevant to information security, such as network security, operating systems, cryptography, intrusion detection/prevention systems, firewalls, and security assessment tools.

Job Responsibility

Implement and maintain security controls for information systems, ensuring alignment with NIST 800-53, NIST 800-171, and other applicable security frameworks
Develop and maintain security documentation, including System Security Plans (SSPs), risk assessments, incident response plans, and security policies and procedures
Utilize eMASS for documenting and managing security controls, developing ATOs for AFRL owned systems, conducting self-assessments, and preparing for audits and assessments
Develop and maintain system security plans (SSPs), policies, and procedures within the eMASS framework, track and manage POA&Ms within eMASS to remediate vulnerabilities and security gaps and support the Authorizations to Operate (ATO) process by providing security documentation, answering security controls, participating in security reviews, and addressing security findings.
Conduct security assessments and audits to identify vulnerabilities and recommend corrective actions
Advise and assist within Special Access Program (SAP) and/or classified environments and support other unclassified enclaves supporting DoD agencies, such as HQ Air Force, Office of the Secretary of Defense and Military Compartments efforts

What we offer

Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , Warrenton

Salary:

185000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Knowledge and experience with NESSUS/ACAS and Trellix administration
Experience in Splunk role while working in a Splunk Clustered Environment
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Endpoint Security Engineering (Trellix/ePO): Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments
Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs
Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements
Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance
Vulnerability Management (ACAS/Nessus): Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners
Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures
Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories
Security Integration & Engineering: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response
Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&A) process and RMF packages for Authority to Operate (ATO)
Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , San Antonio

Salary:

160000.00 - 175000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Experience in Splunk role while working in a Splunk Clustered Environment
Knowledge and experience with NESSUS/ACAS and Trellix administration
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Experience creating custom dashboards, writing queries, building, and generating reports, and setting up alerts and notifications using all the Cyber tools (Splunk, Tenable, Trellix)
Demonstrated proficiency with recognizing and onboarding new data sources into the cyber tools and analyzing the data for anomalies and trends
Primarily responsible for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers
Use knowledge, skills, and ability to conduct research for designing, integrating, and implementing security controls into current and future products/systems thus ensuring these systems can be accredited based on compliance with the Joint Special Access Program Implementation Guide (JSIG)
Recommend the components to implement system security requirements using intimate knowledge of security design best practices for information systems throughout the system development life cycle to support the generation of security engineering products
Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server
Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted
Administration/operation of information security compliance tools/platforms with a special concentration in managing Tenable Security Center and NESSUS
Provide Tier 1, 2, and 3 maintenance support for deployed cyber security technologies
Assist with periodic and regular security assessments

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Select Country

Information System Security Manager Level 3

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?