ECS is seeking an Information Systems Security Officer to work in our Clarksburg, WV office (remote).
Job Description:
The ISSO positions support the establishment, implementation, and maintenance of a life-cycle security model that develops, maintains, and dispositions CJIS Division information systems, services, and data, and safeguards their confidentiality, integrity, and availability. The ISSO coordinates with system owners to ensure systems are operated and maintained in accordance with security policies and practices and reports all information system security incidents through the appropriate FBI channels. The applications and tool sets that are currently being used to perform the ISSO support functions are Risk Vision, ClearQuest, GITLAB, JIRA, SharePoint, Splunk, BigFix, and Tenable Security Center. Contractors are responsible for supporting additional applications and tool sets as needed.
Duties include:
- Assisting CJIS stakeholders in identifying and evaluating technical and operational security risks, threats, weaknesses, and vulnerabilities associated with CJIS information systems;
- Reviewing acquisitions for products as they relate to information security;
- Supporting the SAA process of CJIS information systems to verify and validate conformance to Federal and FBI policies, regulations, FISMA compliance and standards, and to meet specified security requirements. Support will parallel with EISS certification testing methodologies and strategies;
- Providing presentations, briefings, and training as assigned;
- Supporting tier level/data categorization and providing data categorization reports as assigned;
- Monitoring trends in technology, performing system security analyses, and recommending strategies and solutions for improving or enhancing system security;
- Reviewing system specifications to ensure security requirements are met and reviewing for approval proposed system and engineering change requests and modifications to determine impact on system security;
- Reviewing and maintaining required system documents to ensure all security related policy requirements have been addressed, providing guidance on the establishment of detailed SSPs for ensuring system requirements are met, and reviewing proposed changes to system requirements to evaluate the impact on system security;
- Evaluating security vulnerabilities with regard to confidentiality, integrity, and availability, and recommending appropriate solutions, viable strategies, and/or mitigations;
- Recommending and advising on standards and procedures that reflect good practice in IT infrastructure management and providing security policy support.
Salary Range: $75,000 - $100,000
General Description of Benefits
Required Skills: - Associates degree.
- Must have a current Top-Secret Clearance with the capability of obtaining SCI / CI-Poly if needed to meet contract requirements
- 4+ years in the following:
- Experience in information system compliance with government standards and industry best practices, including National Institute for Standards and Technology (NIST), Open Web Application Security Project (OWASP), Common Criteria, Defense Information Security Agency (DISA) and SANS Institute;
- Experience working in Agile development environments;
- Demonstrated level of experience in information security practices within the federal and/or state governments;
- Previous hands-on technical experience demonstrated in networking, system administration and development; and
- Working knowledge of Continuous Integration/Continuous Delivery (CI/CD) Pipelines Virtualization, and software-defined networking.
Desired Skills: - Cloud Certifications
- GRC Tool Experience
ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, sex, age, sexual orientation, gender identity or expression, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, status as a crime victim, disability, protected veteran status, or any other characteristic protected by law. ECS promotes affirmative action for minorities, women, disabled persons, and veterans.
ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.
General Description of Benefits
This job has expired.