What are the responsibilities and job description for the Information System Security Officer (Mid position at Cimarron Inc.?
Position Introduction/Key Duties
Cimarron is seeking a mid-level Information System Security Officer (ISSO) to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at the Redstone Arsenal in the Huntsville, AL area.
Key Duties
Required Skills, Experience, and Education :
Cimarron is a global solutions company with a strategic partnering approach to satisfying customer-driven requirements. We ensure customer success with a modern approach and experienced leadership. Driven by an entrepreneurial spirit, Cimarron is fueled by highly skilled employees, developing new innovative technologies, and delivering superior products and services. We believe in recognizing employees' worth by offering competitive salaries and benefits, including health, dental, and vision insurance, 401(k) contributions, educational reimbursement, and much more. From company communication through Company-wide information meetings led by our President and CEO, to an Awards program designed to recognize our amazing employees and their accomplishments, you will not only feel like you are a part of a team, you will be a valued member of the Cimarron family. Cimarron is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law.
Cimarron is seeking a mid-level Information System Security Officer (ISSO) to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at the Redstone Arsenal in the Huntsville, AL area.
Key Duties
- Perform verified risk assessments covering all security controls and policies in alignment with Joint SAP Implementation Guide (JSIG) methodologies.
- Develop and maintain documentation and artifacts supporting Control Validation Tests (CVTs) to confirm compliance with Authorizations to Operate (ATOs) for SAP packages.
- Conduct security audits on both Windows and Linux systems to ensure compliance with applicable standards.
- Interpret and apply Security Technical Implementation Guides (STIGs) using STIG Viewer.
- Monitor and assist in implementing and validating security controls.
- Manage and track Plans of Action and Milestones (POA&Ms) to ensure timely resolution and continuous compliance.
- Perform routine audit management and reporting activities.
- Monitor and validate patch management and endpoint security status.
- Develop and maintain security metrics and reporting, effectively articulating findings and trends to stakeholders.
Required Skills, Experience, and Education :
- Due to facility security requirements, only U.S. citizens are eligible for consideration at this time.
- Ability to complete a pre-employment background check and drug screening, which will include, but is not limited to, testing for marijuana use.
- This position requires access to federal facilities. Candidates must possess a valid, unexpired Real ID-compliant driver's license or state-issued identification card at the time of hire. If you are unsure whether your ID is Real ID-compliant, please check for the star symbol in the upper portion of your driver's license or state ID.
- Active Top Secret Clearance with SCI eligibility.
- 4 or more years of general, full-time work experience.
- 2 or more years of directly related experience.
- 1 or more years of management or leadership experience.
- Current DoD 8570 IAT Level II certification (ex., Security ).
- Current DoD 8570.01 IAM Level II certification (ex., CGRC (CAP), Security X (CASP-CE).
- Experience with Windows and Linux OS.
- Experience with SolarWinds.
- Experience creating and maintaining documentation artifacts for JSIG (SAP-level).
- Experience with ACAS, audit reviews, and continuous monitoring for Windows and Linux OS.
Cimarron is a global solutions company with a strategic partnering approach to satisfying customer-driven requirements. We ensure customer success with a modern approach and experienced leadership. Driven by an entrepreneurial spirit, Cimarron is fueled by highly skilled employees, developing new innovative technologies, and delivering superior products and services. We believe in recognizing employees' worth by offering competitive salaries and benefits, including health, dental, and vision insurance, 401(k) contributions, educational reimbursement, and much more. From company communication through Company-wide information meetings led by our President and CEO, to an Awards program designed to recognize our amazing employees and their accomplishments, you will not only feel like you are a part of a team, you will be a valued member of the Cimarron family. Cimarron is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law.