Job Description
We are looking for an
Information Systems Security Officer (ISSO) with experience performing FISMA compliance for the federal government to join our client’s team in support of their federal customer. The ISSO is responsible for Security Authorization activities the customer in accordance with National Institute of Standards and Technology (NIST) 800 series.
A successful candidate will manage tasks related to the planning and preparation for security documentation related to the system authorization process. The individual should have extensive knowledge of cloud environments and FedRAMP processes. The individual should have a strong background in NIST 800-37, Risk Management Framework and NIST 800-53 security controls.
This is a direct hire position with our client with a salary range of up to $125k. This role requires 1-2 days/week onsite at the customer’s location in Camp Springs, MD. US Citizenship and the ability to obtain an agency-specific Public Trust clearance is required.
Responsibilities Include: - Develop and update the information system security documentation (e.g., Security Plan, Contingency Plan, Contingency Plan Test, Business Impact Analysis, FIPS-199, eAuthentication, Privacy Threshold Analysis, etc.)
- Ensure systems are appropriately patched and hardened.
- Coordinate the remediation of Plan of Action and Milestones (POA&M) with various groups.
- Facilitate and support the Ongoing Authorization Program.
- Effectively communicate technical information to non-technical personnel.
- Conduct ISSO responsibilities to include the approval of change request, review of audit logs, review of system accounts, and analysis of vulnerability scans.
- Develop waivers & exceptions for information system vulnerabilities.
- Work with clients to develop capabilities briefings and presentations.
- Provide security recommendations to the Risk Management Branch Chief.
Required Skills and Qualifications: - Must be a US Citizen able to obtain an agency-specific suitability / public trust clearance prior to starting.
- Must reside within a commutable distance to our client's location in Camp Springs, MD in order to work a hybrid onsite schedule (1-2 days /week onsite).
- One or more of the following certifications: CISSP, Security+, ISSAP, CEH, CISM, CISA.
- Bachelor's degree or higher.
- 5+ years of experience in the field of information security.
- Knowledge of security tools, security architecture, and NIST security standards and compliance measurements.
- Experience in the application of FISMA guidelines including the NIST special publications 800-18, 800-30, 800-37, 800-39, 800-53, 800-53A, 800-60, and 800-137.
- Understanding of the NIST Supplemental guidance for Ongoing Authorization.
Desired Skills and Qualifications: - Engineering/architecture experience with systems in the cloud; specifically, AWS, Google, or Azure.
- Experience with Agile development practices.
- Ability to develop scripts or dashboards.
- Experience with CI/CD - Deployment pipeline experience (e.g., Jenkins, Ansible, Terraform).
- Experience with programming languages (e.g., Python, Java).
- Experience with container/orchestration tools (e.g., Kubernetes, Docker, Puppet).
- Possess ability to provide security recommendations during the change management process.
- Extensive knowledge of Fortify, Twistlock, Nessus, DBProtect, and WebInspect vulnerability scanners.
- AWS, Azure, Cloud Certification (Preferred).
Job Tags
2 days per week, 1 day per week,