Information Systems Security Officer (ISSO)(TS/SCI with Polygraph Required)
Columbia, MD, United States
SCD Information Technology is currently seeking an Information Systems Security Officer (ISSO) to join our team in Columbia, MD.
SCD Information Technology is a cutting-edge technology company specializing in providing innovative solutions to clients in various sectors, including government agencies and defense organizations. SCDIT prides itself on delivering reliable and secure IT services that empower our clients to achieve their mission-critical objectives.
Responsibilities: Maintain the appropriate operational security posture for assigned systems, programs, and/or enclaves.
Provide guidance and technical expertise on all matters that impact or affect the security of the information system.
Assist in the development and execution of an enterprise level continuous monitoring program to minimize security risks and ensure compliance with that program on a routine basis.
Developing, updating, and submitting the System Security Plan and other required documentation that make up the Security Authorization Package.
Conduct configuration management for security-relevant changes to software, hardware, and firmware.
Perform and deliver security impact analyses of changes to the system or its environment of operation.
Assess the effectiveness of system security controls on an ongoing basis to determine system security status.
Maintain and enforce IT security policies and implementation guidelines for customer systems in diverse operational environments.
Provides configuration management for security-relevant information system software, hardware, and firmware.
Qualifications: ACTIVE TS/SCI with POLYGRAPH
10 years of related work experience in the field of security authorization.
A Bachelor's degree in Computer Science, Information Technology Engineering, or a related field may be substituted for 4 years' experience.
DoD 8570.1 compliant IAM Level I certification, such as the CompTIA Security+ certification. A higher-level certification, such as GSLC, CAP, CASP, CISM and/or CISSP will also be accepted.
A working knowledge of the security authorization processes and procedures as defined in the RMF in NIST SP800-37 and familiarity with the ICD503, CNSSI1253, SP800-53, etc.
Knowledge of commercial security tools and their uses.
Experience with hardware/software security implementations.
Knowledge of different communication protocols, encryption techniques/tools, and PKI and authorization services.
Familiarity with security incident management, experience collaborating with Incident Response Teams, and able to provide viable recommendations for the resolution or computer security incidents and vulnerability compliance.
Experience creating and presenting documentation and management reports.
Desired Skills: Should have experience working with the XACTA IA Manager.
Should be highly analytical and effectively able to troubleshoot and prioritize needs, requirements, and other issues.
SCDIT Benefits: A family-owned and run company that cares about your continued career growth and happiness.
100% Company-paid Health, Dental, Vision insurance for you and qualifying dependents
100% company-paid life insurance, short term disability and long-term disability for you.
HSA (Health Savings Account) with a company contribution of $500 annually to help you pay for qualified medical expenses.
401(k) retirement program with company match
Generous Paid Time Off package
Paid holidays
$5,000 in Tuition Reimbursement every year
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.