The Cyber and Information Security Department is seeking an experienced Information Systems Security Officer to join our team. This team protects the infrastructure of the organization by taking proactive security measures, assessing risks, responding to security breaches, and ensuring compliance. If you consider yourself an analytical leader who enjoys solving problems, is comfortable communicating and collaborating with a diverse audience, and can easily work alone or in a group, read on!

Responsibilities include:

• Lead, conduct, develop, validate, and submit information system security plans, security test and evaluation plans, certification and authorization packages, and plans of action and milestones in support of compliance requirements
• Lead, conduct, develop, plan, and coordinate risk assessments of information systems in development, test, production and research environments as required by established or newly determined compliance/audit requirements
• Monitor and assist in the assessment and review of systems and networks within the environment to identify where systems/networks deviate from acceptable configurations, enclave policy, and local policy
• Develop training material related to compliance and audit requirements to assist employees in individual compliance/audits as applicable
• Assist in technical requirements such as; vulnerability scanning, review of security/event logs, network analysis, and incident response on an as-needed basis

Education/Experience:
Typical education and experience requirements include a Bachelor's degree or higher in a related field plus five years of related experience, or an equivalent combination of education and experience.

Required skills and experience areas include:

• RMF assessment and authorization process
• NIST/ISO standards, Department of Defense directives, and regulatory

requirements

• Windows and UNIX/Linux operating system administration
• Operational experience, with familiarity in security/event log auditing
• Security plan development and/or continuous monitoring for compliance with security plans
• The ability to certify and maintain information security related certification

(Security , CASP, GSEC, CISM, CISSP [CISSP is an anticipated requirement of the sponsor])

• An current, active TS/SCI security clearance with adjudicated full scope polygraph

Required skills and experience areas include:

• Vulnerability scanning and mitigation. Nessus, Retina, GFI Languard, Trivvy, or similar tools
• TCP/IP network analysis and network/packet level examination tools such as tcpdump, Zenmap, or Wireshark
• Network monitoring tools such as Bro, Suricata, or Snort
• SEIM management or use for analysis, such as Splunk, ELK, or Alienvault
• VMware and management of Virtual Machines
• Policy and procedure development
• Enforcement of audit requirements
• Development and support of a certification test plans and continuous monitoring plans
• Plan of action and milestone development
• Training material development
• Risk assessment planning and preparation

Job Type: Contract

Pay: $55.00 - $70.00 per hour

Application Question(s):

• Do you have TS/SCI security clearance with adjudicated full scope polygraph?
• Are you a US citizen?
• Are you near or local to the Annapolis Junction, MD area?

Experience:

• Cybersecurity: 3 years (Required)

Work Location: In person