Information System Security Officer (ISSO)

ARS is looking for an Information System Security Officer (ISSO). Our desire is to build a team of highly qualified professionals that will provide expertise in Cybersecurity, Cloud, and Systems Engineering, who will support the development and sustainment of unique secure enclaves at the edge, that provide enterprise services and cyber network defense capabilities to customers across the DoD. This team will provide engineering expertise using technologies such as ePO, Splunk, ACAS, Azure Automation, STIG/SCAP, and other enterprise capabilities. The ISSO will have an active role in monitoring a system and its environment of operation to include developing and updating a System Security Plan, managing and controlling changes to the system, and assessing the security impact.  

Why Work with us?  

​Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.   

Responsibilities:

• Maintain the operational security posture of systems.
• Monitor systems and environments for security compliance.
• Develop and update System Security Plans (SSPs).
• Manage and control system changes and assess their security impact.
• Handle physical, personnel, and environmental security.
• Conduct incident response and security awareness training.
• Assist the ISSM and assume ISSM duties when necessary.
• Assist the ISSM in meeting their duties and responsibilities. The ISSO shall assume ISSM responsibilities in the absence of the ISSM;
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package;
• Maintain equivalent IAM Level 2 certifications based off of DoD 8140 standard;
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the IS;
• Report all security-related incidents to the ISSM
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package;
• Serve as member of the CCB, if designated by the ISSM;
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change;
• Formally notify the ISSM and AO/DAO when changes occur that might affect system authorization;
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly;
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals; and
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Participate in joint agile backlog planning and provide feedback to the software development team and infrastructure teams around high to medium risk items that require information system owner approval.
• Other duties as assigned

Requirements:

• Must be a US citizen
• Top Secret w/ SCI clearance
• Minimum of 5 years of hands-on experience securing and monitoring pure cloud infrastructure within Microsoft Azure, with a focus on threat protection, posture management, and compliance enforcement.
• Advanced technical competency and experience in one or more of the following areas: Active Directory Domain Services, Active Directory Federated Services, Active Directory Certificate Services, Windows Server Update Services, ePO, Splunk, STIG/SCAP, YUM, ACAS Automation, and Azure Monitor / Log Analytics.
• Maintain equivalent IAM Level 2 certifications based off of DoD 8140 standard
• Bachelor’s degree in computer science, Engineering, Finance, Business, or related
  field

• Desired Certifications: Active Azure or Microsoft security-centric certification preferred, such as Microsoft Certified: Azure Security Engineer Associate (AZ-500), Cloud and AI Security Engineer Associate (SC-500), or Security Operations Analyst Associate (SC-200)

All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check. 

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities. 

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.