Information System Security Officer

Responsibilities

• Perform Certification & Accreditation (C&A) and System Assessment & Authorization (SA&A) using NIST SP 800-37 RMF
• Prepare vulnerability scanning test plans and conduct scans using Nessus, Foundstone, WebInspect, and Hailstorm
• Evaluate information systems' security control compliance with federal requirements
• Manage emerging and defined risks associated with assigned information systems
• Coordinate with Cybersecurity Units to maintain Authorization to Operate (ATO)
• Serve as a member of the Configuration Control Board (CCB)
• Establish and review audit trails and logs in accordance with DOJ policies
• Analyze vulnerability data and present results to system owners and leadership
• Develop and maintain internal Standard Operating Procedures (SOPs)
• Provide system operation support and administer hardware/software inventory

Requirements

• B.A. or B.S. in Computer Science or a related field
• Experience with system authorizations and configuration management
• Experience creating or modifying information security documentation
• Experience testing and documenting information security controls (NIST SP 800-53)
• Active Public Trust clearance adjudicated within the past 5 years
• Previous experience working on US Federal Government projects

About the Company

NXTKey provides commercial and government entities with cybersecurity, enterprise information management, ICT consulting, development, and project management solutions.