Senior Information System Security Officer (TS SCI) - PLACEMENT
Risk Management Framework (RMF)
Lead the Risk Management Framework (RMF) lifecycle and the development of Authority to Operate (ATO) packages from start to finish.
Manage and oversee Plans of Action and Milestones (POA&M), vulnerability remediation, and continuous monitoring activities.
Incident Response
Provide hands-on support for incident response, threat assessments, and investigations.
Security Controls
Develop and maintain System Security Plans (SSPs), Configuration Management Plans, Contingency Plans, and Incident Response Plans.
Conduct risk assessments, annual security assessments, and vulnerability assessments.
Support the integration of security throughout the System Development Life Cycle (SELC) by working with development teams.
Perform security architecture reviews and contribute to the design of secure solutions.
Brief leadership on security posture and mentor junior ISSO staff.
Compliance and Standards
Support the integration of security throughout the System Development Life Cycle (SELC) by working with development teams.
Perform security architecture reviews and contribute to the design of secure solutions.
Qualifications
- Education and Experience: Bachelor's degree with 10 years of experience, OR Associate's degree with 13 years of experience, OR 16 years of experience with no degree.
- Technical Skills and Certifications: Must hold one of the following: Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or CompTIA Advanced Security Practitioner (CASP+).
- Deep expertise in FISMA, NIST, and DHS 4300A compliance frameworks.
- Experience with GRC tools such as Xacta IA Manager and/or CSAM.
- U.S. Citizenship is required for this position.
- Experience supporting federal systems in a hands-on and leadership capacity.
Preferred Qualifications
- Previous DHS or DoD experience.
- Experience with Supply Chain Risk Management.
- Experience with GRC tools such as RegScale or eMASS.
- Knowledge of Intelligence Community directives.
- Experience supporting emergency operations or disaster response missions.
- Strong communication skills for presenting to senior leadership.
Benefits
Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection.
We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure.
We also offer a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts.
In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA.
We have a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach.
You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.
Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law.
Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.