Назад
Company hidden
8 дней назад

ISSO Specialist (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
ISSO Specialist (Cybersecurity): Supporting cybersecurity compliance and authorization activities for a defense research organization with an accent on system security plans, risk management, vulnerability remediation, and continuous monitoring. Focus on assessing security controls, maintaining POA&Ms and compliance artifacts, scanning systems, and interpreting audit findings to reduce organizational risk.

Location: 100% onsite in Lexington, Massachusetts; must be within 100 miles of Lexington and must be a US citizen. The role is primarily performed in a closed space, with 9/80 or 4/10 schedule flexibility.

Company

hirify.global provides technical services and cybersecurity solutions, supporting a premier defense research organization.

What you will do

  • Support compliance activities, configuration reviews, continuous monitoring, and periodic organizational assessments.
  • Maintain System Security Plans, POA&Ms, Risk Assessment Reports, Continuous Monitoring Strategies, and related security artifacts with Program Managers and the ISSM.
  • Track audit findings, vulnerabilities, remediation plans, and mitigation actions.
  • Conduct network, system, and application vulnerability scanning, configuration assessments, and remediation.
  • Prepare technical documents, incident reports, examination findings, and situational awareness information; report suspected security violations.
  • Align IT security priorities with the security strategy and recommend resources needed to operate systems securely.

Requirements

  • Active Top Secret/SCI clearance or SCI eligibility and US citizenship are required; a CI polygraph may be required.
  • Current DoD 8570 IAT Level II certification; Security+ CE is the minimum requirement. Accepted certifications include GSEC, Security+ CE, SSCP, and CCNA-Security.
  • Four years of experience in system auditing, regulatory and compliance work, and government policy and regulations.
  • Four years of experience with STIGs/SCAP, NIST 800-53, NIST SP 800-37, and the Risk Management Framework.
  • Four years of experience assessing security controls, assessment and authorization, authorizing systems, system categorization, continuous monitoring, implementing controls, monitoring security controls, and selecting security controls.
  • A bachelor's degree is preferred but not required.

Nice to have

  • Bachelor's degree.
  • HBSS.
  • NIST 800-171.

Culture & Benefits

  • Fast-paced, customer-focused, technically innovative environment with emphasis on technical challenges, continuous learning, and team contribution.
  • 15 days of PTO, 10 paid holidays, floating holidays, volunteer leave, and one week of paid maternity/paternity leave after one year of full-time employment.
  • Up to $5,000 annually in tuition reimbursement for eligible full-time employees after six months, subject to approval and course requirements.
  • 401(k) participation from the first day of employment with employer matching and immediate eligibility.
  • BYOD reimbursement of up to $1,500 every three years after six months, subject to configuration requirements.
  • CI polygraph participation may be required, and SCI eligibility must be validated before submission.

Hiring process

  • Complete a phone screen followed by an extensive Zoom interview with team members.
  • Eligible candidates must be willing to participate in a CI polygraph if required; SCI eligibility must be validated before submission.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →