Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$126к-190к/год
$130к$150кмедиана$170к
По похожим ролям (48) ~ $150к/год
На СНГ рынке: $5.1к/мес ($3.2к - $7.9к)
79
Хорошая вакансия
развернуть
Понятные обязанности для senior-специалиста и работа с кибербезопасностью федеральных систем делают вакансию привлекательной, но обязательный офисный формат и допуск сужают круг тех, кому она подходит.
Кликните для подробной информации
Понятные задачиНужен допускРабота в офисе
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Information Systems Security Officer - Senior (ISSO) BDVA 1667 (Cybersecurity): Ensuring the confidentiality, integrity, and availability of critical federal and defense systems through the Risk Management Framework lifecycle with an accent on continuous monitoring, compliance documentation, and vulnerability remediation. Focus on navigating NIST and FISMA requirements, maintaining SSPs and POA&Ms, tracking audit evidence, and coordinating security hardening across regulated government environments.
Location: Reston, VA, US
Salary: $126,000–$190,000 annually
Company
hirify.global designs, develops, and deploys cybersecurity and advanced technology solutions for federal and defense customers.
What you will do
Navigate systems through the six-step Risk Management Framework lifecycle in accordance with FISMA.
Conduct daily, weekly, and monthly continuous monitoring, including audit log reviews and account management audits.
Coordinate security hardening using DISA STIGs and CIS Benchmarks and track vulnerability remediation.
Develop and maintain System Security Plans, Plans of Action & Milestones, and other security documentation.
Gather compliance artifacts and evidence for internal and external audits and maintain records in GRC systems such as eMASS, Xacta, CSAM, or Archer.
Report security incidents and unauthorized activities to the ISSM and incident response teams.
Requirements
7–10 years of professional experience in information assurance, cybersecurity compliance, or systems administration.
US citizenship and Secret clearance are required.
Bachelor’s degree required; a master’s degree is preferred, and equivalent experience may substitute for the education requirement.
Deep understanding of the RMF process under NIST 800-37 and NIST 800-53 security controls.
Familiarity with agency-specific control overlays and policies, including CNSSI 1253, DHS 4300A, or DoD SRGs.
Experience with vulnerability scanning and auditing tools such as Tenable, Nessus, ACAS, Qualys, or Splunk.
Excellent problem-solving and analytical skills for tracking complex security issues.
Hands-on experience with Agile delivery models such as Scrum, Kanban, or SAFe and a DevSecOps framework.
Nice to have
Experience working alongside DevSecOps and IT operations teams.
Familiarity with zero-trust network principles.
DoD 8140/8570 IAM/IAT Level II certification, such as Security+ CE, CAP/CGRC, or CySA+.
Culture & Benefits
Regular, full-time employment supporting federal and defense systems.
Work is performed in a highly regulated environment involving government compliance and security requirements.
Equal opportunity employment is provided without regard to protected characteristics.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →