Information System Security Officer (ISSO) TS/SCI with Poly

cBEYONData is seeking a Information System Security Officer (ISSO) to support our federal customer's multi-domain technology platform which offers military and business decision makers, analysts, and users at all levels unprecedented access to authoritative enterprise data and structured analytics in a scalable, reliable, and secure environment.

Responsibilities:

• Use experience to work with Government stakeholders and a cloud-based application and platform development team to discover their cyber risks, understand applicable policies, and develop a mitigation plan
• Review technical, environmental, and personnel details from Security Engineers, Platform and Application Developers, and Enterprise Architects to assess the entire threat landscape
• Support a larger cyber team in collectively guiding your client through a plan of action with presentations, documentation, and milestones
• Work with a cyber team to translate security concepts, so they can make the best decisions to secure their cloud infrastructure, Artificial Intelligence solutions, containerized applications, CI/CD application pipelines, and sensitive data repositories
• Conduct risk assessments, considering data confidentiality, integrity, and availability
• Be involved in organized Incident Response actions - consulting, guiding, and reporting back to key stakeholders
• Support the team in meeting authorization timelines and coordinating communications with external entities in support of that objective
• This is your opportunity to act as an information security subject matter expert while broadening your skills in AWS, AI/ML, Containerization, CI/CD, Agile development, DevSecOps, Risk Management, and Data Security

Requirements:

• 5+ years of experience implementing risk management methodologies contained in best practice documentation (e.g. - NIST SP 800-30, SP 800-53, SP 800-128, SP 800-160, SP 800-171, CIS benchmarks, et. al.) in support of system security configurations, practices, and oversight.
• 3+ years of experience supporting cybersecurity operations in an ISSO capacity, interfacing with internal and external SMEs such as PMs, Cyber Assessors, and AOs.Familiar with control implementations associated with RMF, FedRAMP, ICD 503, and DoD Information Levels, et.al., including applying them to the design and implementation of IT solutions to achieve system authorizations
• Experience implementing and maintaining security controls within AWS cloud, containerized, CI/CD pipeline, and agile development environments
• Experience developing and reviewing ATO authorization packages in Xacta and/or eMASS
• Experience analyzing compliance and vulnerability scan results and implementing appropriate mitigations
• Experience performing audit log reviews to detect anomalous behavior in information systems and networks and overseeing continuous monitoring activities
• TS/SCI clearance with CI Polygraph
• Security+ or higher certification
• High School diploma or GED

Nice to Have:

• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tools.
• Familiarity with cyber related tools such as Ansible, Terraform, Splunk, STIG Viewer.
• Ability to work through challenging security requirements to maintain compliance.
• Excellent written, organizational, presentation, and communication skills.
• Two or more certifications detailed in DoD 8570.
• B.S. degree in a relevant technical field from an accredited university