Chief Information Security Officer

About the Role

This position requires expertise in Risk Management Framework (RMF), network scanning (NMAP), Public Key Infrastructure (PKI), protocol analysis (Wireshark), security auditing, penetration testing, and scripting. Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance with polygraph are mandatory.

Requirements

• United States citizenship
• Active TS/SCI security clearance with polygraph
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline
• Twelve (12) years of experience working as an Information Systems Security Engineer (ISSE) on a large technical program
• Solid understanding of security practices and policies, with hands-on vulnerability testing experience using Customer tools
• Experience applying Risk Management Framework (RMF)
• Experience formulating and assessing IT security policy
• Demonstrated knowledge of and experience with common security tools such as Nessus, NMAP, and Wireshark
• Experience with hardware/software security implementation, communication protocols, encryption techniques/tools, and web services
• Experience with secure configurations of commonly used desktop and server operating systems
• Ability to work on multiple systems and components simultaneously in various configurations
• Strong verbal and written communication skills
• Commitment to adopting and adhering to best practices
• Ability to effectively plan and prioritize tasks and communicate technical options and trade-offs
• Capability to perform high-quality work both independently and with a team in a fast-moving environment

Preferred Qualifications

• Five (5) years of experience with Defense in Depth principles/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development
• DoD 8570 compliance with IASAE Level 2 or 3
• Information Systems Security Engineering Professional (ISSEP) Certification
• Computer Information Systems Security Professional (CISSP) Certification
• Experience developing/implementing integrated security services management processes, such as assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation
• Experience with penetration testing tools
• Experience with scripting languages

Pay

$140,000 - $265,000 a year. The pay range is a general guideline and may vary based on responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data, and other applicable factors.

Benefits

• Affordable healthcare options with 80% employer-paid premium plus a company-funded HSA
• Comprehensive dental insurance
• Vision insurance with 80% employer-paid premium
• Employer-paid life insurance
• 100% employer-paid short-term and long-term disability
• Annual training, continued education, and professional memberships reimbursement
• Unlimited access to Red Hat Enterprise Linux, AWS, and NetApp training and accreditation
• Annual reimbursement for technology (e.g., phones, computers, printers)
• 401(k) with company match up to 5% and 100% immediate vesting (after 90 days of employment)

Environment and Perks

• Professional development investment and paid time off for training
• Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, California, Florida, and Hawaii
• Team-building events throughout the year, including Destination Family Events, Holiday Party, and Monthly Get-Togethers
• Leadership team engagement and mentorship
• Performance Recognition Program
• Complimentary branded apparel