Avint LLC is seeking a motivated, career, and customer-oriented Information System Security Officer to join our team at the Hanscom Air Force Base. The person in this position shall ensure that all system and application deliverables meet the requirements of DoD and Air Force Cybersecurity policies and directives.

Position Responsibilities:

• Supporting system and or application assessment and authorization (A&A) efforts, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and USAF policies (i.e., CNSS, NIST, RMF, etc.)
• Developing policies and procedures to enhance the cybersecurity posture and hygiene of USAF enterprise systems and applications, both on premises and in the cloud, effectively ensuring the reliability of and accessibility of those information systems and applications
• Recommending and developing governance and engineering solutions which prevent and defend against unauthorized access to systems, networks, and data.
• Conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promoting awareness of security issues among management and ensuring sound security principles are reflected in Avints’ visions and goals.
• Conducting systems security evaluations, audits, and reviews.
• Creating systems security contingency plans and disaster recovery procedures.
• Implementing programs to ensure that systems, networks, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participating in network and systems acquisition and design to ensure procurement, development, and implementation of appropriate systems security policies.
• Facilitating the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assessing security events to determine impact and implementing mitigations, remediation's, and/or other corrective actions.
• Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services. Assist with development of building and executing a common controls program, providing control inheritance as applicable to systems hosted in the environment.
• Assist with the development and/or implementation of processes and procedures to improve and streamline cybersecurity processes to better incorporate cybersecurity into all aspects of the acquisition lifecycle.