Information Systems Security Officer (ISSO)

Overview

Byte Systems, a subsidiary of VTG, is seeking an Information Systems Security Officer (ISSO).

About the Role

The ISSO supports the assessment and authorization (A&A) process for information systems. They are responsible for improving the security posture of critical systems through various methods and tools, including identifying risks, vulnerabilities, anomalies, patching, auditing, automation, security hardening, best practices, and evaluating system changes.

Responsibilities

• Support control implementation assessment and reporting and monitoring processes using cyber security and assessment management systems
• Understand perimeter controls (firewalls), access control mechanisms, and network architectures
• Demonstrate understanding of methods for hardening operating systems (e.g., CentOS, RedHat, Windows)
• Skilled with and/or demonstrate technical aptitude with vulnerability and risk assessment tools such as Elasticsearch or Splunk SIEMs, Rapid7 Nexpose, and IDS/IPS monitoring and alerting
• Experienced working closely with stakeholders, developers, and external teams, including customer security managers (ISSMs), organizational leadership, and key personnel
• Knowledgeable regarding Common Control Provider (CCP) requirements and methodology
• Skilled in cross-team collaboration and effective communication to fulfill specific authorization requirements
• Document processes and procedures in CONOPS and system security, contingency, configuration management and other plans
• Facilitate customer concurrences required for risk-based decisions, especially those requiring waivers
• Assist the customer with decisions impacting the security posture and compliance of their systems and networks with requirements documented in NIST 800-53 and its revisions
• Extensive familiarity with communications protocols, such as TCP/IP, UDP, HTTP/S, SSH, LDAP, etc.
• Experience in scripting/program languages such as Bash, PowerShell, or Python
• Experience with security, monitoring, and auditing cloud-based technologies, products, and services, such as Amazon Web Services (AWS) or Microsoft Azure
• Ability to work within fast-paced customer environments

Requirements

• Bachelor’s degree in Cybersecurity, IT, or other related technical discipline; or the equivalent combination of education, technical training, or work/military experience
• Minimum eight (8) years applied experience or relevant degree plus five (5) years of Cybersecurity expertise with demonstrated ability to successfully shepherd IT projects of varying types through the authorization lifecycle

Qualifications

VTG’s estimated starting pay range is $140,000-$200,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.