Назад
Company hidden
13 часов назад

Information Systems Security Officer (ISSO) (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Systems Security Officer (ISSO) (Cybersecurity): Producing and maintaining security authorization packages for DoD Special Access Program information systems with an accent on RMF, JSIG compliance, vulnerability management, and system hardening. Focus on analyzing security assessments, network architectures, data flows, and application environments while coordinating risk mitigation and continuous monitoring.

Location: Huntsville, Alabama, United States; onsite support for the US Army Space and Missile Defense Command Technical Center.

Company

hirify.global is a 100% employee-owned company supporting cybersecurity operations for a US Army organization.

What you will do

  • Produce, develop, maintain, and submit security authorization documentation, including SSPs, POA&Ms, Security Assessment Plans, and complete authorization packages.
  • Support ISSMs and enforce DoD cybersecurity policies for Information Systems and Platform IT systems.
  • Verify security clearances, access authorizations, and cybersecurity training before system access.
  • Coordinate corrective actions, protective measures, and reporting for cybersecurity incidents, vulnerabilities, threats, and events.
  • Review penetration test, static code analysis, vulnerability scan, and SIEM reports; analyze architectures, data flows, organizational structures, and personnel assignments for vulnerabilities.
  • Improve system security postures and help secure custom-developed applications throughout their lifecycles.

Requirements

  • Strong understanding of DoD cybersecurity regulations, standards, and tools.
  • Experience supporting Special Access Program information systems, including JSIG Revision 4 and its application to system authorization and cybersecurity compliance.
  • At least 5 years supporting the full cybersecurity lifecycle for DoD systems.
  • At least 5 years of progressively complex experience developing, integrating, and implementing cybersecurity and program protection standards for networks, computing environments, and application development.
  • Experience with RMF, vulnerability management, system hardening, and secure coding practices.
  • Working knowledge of Windows desktop, Windows Server, and Linux environments, including configurations, security controls, vulnerabilities, and audit requirements.
  • Experience using Splunk or similar SIEM tools for security auditing, log analysis, continuous monitoring, and identifying potential security events.
  • Excellent communication and coordination skills across functional teams, with the ability to assess, document, and mitigate cybersecurity risks in complex environments.
  • U.S. citizenship and an active Top Secret/SCI clearance.
  • DoD 8570 Information Assurance Technical Level II certification, such as Security+ CE, SSCP, GSEC, or CCNA Security.

Nice to have

  • Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
  • Advanced Information Assurance Technical Level III certification, such as CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, or CCSP.
  • Experience with ATO packages, RMF documentation, vulnerability assessments, and continuous monitoring.
  • Familiarity with ACAS, eMASS, and HBSS.
  • Experience securing custom application development environments and applying DevSecOps practices.

Culture & Benefits

  • 100% employee-owned company.
  • Equal opportunity employment environment.
  • Full-time position supporting a US Army technical center.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →