Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$98к$112кмедиана$137к
50 в выборке
На СНГ рынке: $2.9к/мес ($2.1к - $3.7к)
69
Хорошая вакансия
развернуть
Обязанности в сфере кибербезопасности и госкомплаенса описаны понятно, но требования к допуску, гражданству и работе только в офисе сильно ограничивают круг тех, кому подойдет вакансия.
Только офис
Нужен допуск
Понятная роль
Поддержка обучения
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
ISSO Specialist (Cybersecurity): Supporting cybersecurity compliance and authorization activities for a defense research organization with an accent on system security plans, risk management, vulnerability remediation, and continuous monitoring. Focus on assessing security controls, maintaining POA&Ms and compliance artifacts, scanning systems, and interpreting audit findings to reduce organizational risk.
Location: 100% onsite in Lexington, Massachusetts; must be within 100 miles of Lexington and must be a US citizen. The role is primarily performed in a closed space, with 9/80 or 4/10 schedule flexibility.
Company
hirify.global provides technical services and cybersecurity solutions, supporting a premier defense research organization.
What you will do
Support compliance activities, configuration reviews, continuous monitoring, and periodic organizational assessments.
Maintain System Security Plans, POA&Ms, Risk Assessment Reports, Continuous Monitoring Strategies, and related security artifacts with Program Managers and the ISSM.
Track audit findings, vulnerabilities, remediation plans, and mitigation actions.
Conduct network, system, and application vulnerability scanning, configuration assessments, and remediation.
Align IT security priorities with the security strategy and recommend resources needed to operate systems securely.
Requirements
Active Top Secret/SCI clearance or SCI eligibility and US citizenship are required; a CI polygraph may be required.
Current DoD 8570 IAT Level II certification; Security+ CE is the minimum requirement. Accepted certifications include GSEC, Security+ CE, SSCP, and CCNA-Security.
Four years of experience in system auditing, regulatory and compliance work, and government policy and regulations.
Four years of experience with STIGs/SCAP, NIST 800-53, NIST SP 800-37, and the Risk Management Framework.
Four years of experience assessing security controls, assessment and authorization, authorizing systems, system categorization, continuous monitoring, implementing controls, monitoring security controls, and selecting security controls.
A bachelor's degree is preferred but not required.
Nice to have
Bachelor's degree.
HBSS.
NIST 800-171.
Culture & Benefits
Fast-paced, customer-focused, technically innovative environment with emphasis on technical challenges, continuous learning, and team contribution.
15 days of PTO, 10 paid holidays, floating holidays, volunteer leave, and one week of paid maternity/paternity leave after one year of full-time employment.
Up to $5,000 annually in tuition reimbursement for eligible full-time employees after six months, subject to approval and course requirements.
401(k) participation from the first day of employment with employer matching and immediate eligibility.
BYOD reimbursement of up to $1,500 every three years after six months, subject to configuration requirements.
CI polygraph participation may be required, and SCI eligibility must be validated before submission.
Hiring process
Complete a phone screen followed by an extensive Zoom interview with team members.
Eligible candidates must be willing to participate in a CI polygraph if required; SCI eligibility must be validated before submission.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →