Information System Security Officer with Secret Clearance

Company: Coalfire Federal
Location: Arlington
Posted on: February 19, 2021

Job Description:

We're growing rapidly and looking for an Information Systems Security Officer (ISSO) with at minimum a Secret Level Clearance to support our team in Arlington, VA.
About CoalfireCoalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. Coalfire Federal along with its parent company, Coalfire, has an unparalleled client list with deep customer relationships with leading cloud and technology providers including Amazon, Microsoft, IBM, Google, Oracle and Federal agencies. Coalfire has been a cybersecurity thought leader for nearly 20 years and has offices throughout the United States and Europe and is committed to making the world a safer place by solving our clients' toughest security challenges.
What you'll doIn this role, you'll provide Information System Security Officer (ISSO) support to our client in Crystal City, VA. As an ISSO, your responsibility will be to assist System Owners (SO) manage and monitor Agency systems throughout different stages of the System Development Lifecycle (SDLC). You must be able to overlay, perform, or support the activities defined in the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to obtain and maintain agency compliance.
Additionally, you will be responsible for:

• Ensure risk analyses are completed to determine cost-effective and essential safeguards
• Maintain and update system security documentation as required in accordance with Agency defined frequencies.
• Perform Continuous Monitoring activities in accordance with the Agency and NIST Continuous Monitoring requirements. The support includes creation of new documents and update of existing documents per contract requirements.
• Support continuous monitoring testing and assisting in the management of the Plan of Actions and Milestones (POA&M)
• Coordinate with the system owner and project team to establish and document processes for audit log management/review, account management, separation of duties and configuration management and to complete all documents defined in the Documents section below.
• Collaborate with the system owner, project team and the Agency's Information Assurance Division to ensure that system security requirements are identified, documented, constructed and validated throughout the project lifecycle, and to coordinate the review of System Security documents by the authorizing official (AO).
• Ensuring security assessments and authorizations (SA&A) of Agency information systems are completed in accordance with the published procedures and providing appropriate level of support for SA&A activities
• Review Security Assessment Plans (SAP), Security Assessment Report (SAR) and assist internal and external audit teams throughout the assessment and authorization process.
• Perform 1/3 security assessment to facilitate the authorization or ATO.
• Serve as a key point-of-contact between the IA Division and the project team and/or system owner before, during and after audit and assessment activities.
  What you'll bringAs an ISSO, you will have to be familiar with the Federal Information Security Modernization Act of 2014 (FISMA), Privacy Act of 1974, and the following:
  
  • Must possess at minimum a Secret Clearance
  • Bachelor's degree (four-year college or university), preferably in Information Systems, Computer Engineering, Computer Science, or Cybersecurity, or equivalent combination of education and experience
  • Must possess at least one of the following certifications: CISSP, CISM, CAP, GSLC, or CASP
  • National Institute of Standards and Technology Special Publication series (800-53, rev.4, 800-53a, 800-37, 800-61, etc.).
  • Five or more (5+) years of relevant experience in functional responsibilities
  • Experience performing system analysis, system audits, system monitoring, security control assessment/testing (or ST&E), risk management, and incident response.
    Bonus Points
    • Knowledge and/or experience using CSAM
    • Knowledge of DISA STIGS, CIS Benchmarks
    • Experience using or interpreting Nessus scans
    • Understanding of FedRAMP and cloud technologies e.g. AWS, MS Azure
    • Experience with MS Project and Visio
      Why you'll want to join usOur people make Coalfire great. We work together on interesting things and achieve exceptional results. We act as trusted advisors to our customers and are committed to client-focused innovation as well as innovation in the industries that we serve. Coalfire offers our people the chance to grow professionally with colleagues they like and respect while tackling challenges that stretch their minds and expand their skill sets. We're connected by our desire to innovate and our goal of helping to make the world a more secure place.
      Coalfire's high energy, challenging, and fast-paced work environment will keep you engaged and motivated. Work-life balance is a core priority at Coalfire - we work hard and we play hard, and the two often overlap. We host family-friendly events and happy hours along with professional meetups and informal networking sessions, and we're active in our communities. Plus, we offer great benefits, including:
      • Health, dental, and vision insurance with an employer contribution
      • Flexible paid time off (employees are encouraged to spend four weeks away from the office each year)
      • A generous 401(k) plan
      • A corporate wellness program
      • Tuition reimbursement Coalfire is an EEO employer. Coalfire is an EEO employer. We celebrate diversity and are committed to respecting, embracing individual differences, and creating an inclusive environment for all employees.

Keywords: Coalfire Federal, Arlington , Information System Security Officer with Secret Clearance, IT / Software / Systems , Arlington, Virginia