Назад
Company hidden
3 дня назад

Information Systems Security Officer (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Systems Security Officer (Cybersecurity) (RMF/NIST/FISMA): Developing and maintaining security plans, control documentation, risk processes, and authorization materials for PAE Aviation systems with an accent on NIST SP 800-53, FedRAMP, DISA STIGs, and DoD compliance. Focus on migrating controls to NIST SP 800-53 Rev. 5, assessing POA&Ms and system changes, and supporting continuous monitoring and authorization activities.

Location: Huntsville, AL, USA; position based in Huntsville and contingent upon award

Company

hirify.global is an employee-owned company supporting PAE Aviation.

What you will do

  • Develop and update application security policies, System Security Plans, Interconnection Security Agreements, and supporting authorization documentation.
  • Establish risk tracking and mitigation processes for the ATO process and review POA&M outputs, control deficiencies, and closure recommendations.
  • Tailor security control baselines for general support, FISMA-reportable, and cloud systems using FedRAMP controls.
  • Collect, validate, and oversee control implementation statements aligned with NIST SP 800-53 and agency security policies.
  • Support migration to NIST SP 800-53 Rev. 5, continuous monitoring, security reviews, compliance inspections, risk assessments, STIG reviews, and security test evaluations.
  • Prepare status reports, briefings, schedules, and project plans while coordinating security and compliance activities.

Requirements

  • Bachelor’s degree (BA/BS), with 5+ years of experience; 7+ years required with an AA/AS degree.
  • IAT II certification and experience with RMF and eMASS.
  • Ability to interpret and apply DoD and Army-level cyber instructions and regulations.
  • Ability to apply cybersecurity theories and principles to IT systems.
  • Understanding of DISA STIG application.
  • Ability to manage people, schedules, tasks, and projects.
  • Excellent written and oral communication skills.
  • Must be a U.S. citizen and hold an active Secret security clearance.

Nice to have

  • Experience with Windows and Linux operating systems.
  • Experience with Trellix, ESS, Elastic, ACAS, Nessus, SCCM, and PowerShell.

Culture & Benefits

  • Full-time employment with an employee-owned company.
  • Equal employment opportunity is provided regardless of protected characteristics, including veteran status and disability.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →