The Role
Serve as the ISSO for cloud environments using Microsoft security products. Author control implementation statements, perform vulnerability scans, produce risk-based reports, assist remediation, enforce RMF-compliant controls, and collaborate with customer security teams to translate policy into operational procedures.
Summary Generated by Built In
Secure IT Service Management, a division of Paragone Solutions, Inc., is seeking an Information Systems Security Officer (ISSO) to join our team in a remote, temp-to-perm position. The ideal candidate will have extensive knowledge and expertise with Microsoft's security, identity and management products to include: Microsoft Entra, Intune, Defender, Security Center, Sentinel, in addition to extensive experience with Microsoft Azure and Office 365 (O365). As the ISSO, you will be responsible for ensuring the security and integrity of the organization’s information systems by implementing and maintaining robust security policies, procedures, and controls.
This is a temporary-to-permanent position; The opportunity for permanent employment is based on the needs of the business and individual performance.
Responsibilities:
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
#ZR
This is a temporary-to-permanent position; The opportunity for permanent employment is based on the needs of the business and individual performance.
Responsibilities:
- Write security control implementation statements, specifically documenting Microsoft 365 implementation.
- Perform security scans, review scan results, and provide application architecture consultation.
- Protect the organization's information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording and destruction.
- Manage security initiatives for cloud-based environments, with a strong emphasis on Microsoft Azure, O365, and Intune.
- Conduct and maintain vulnerability scanning on networks; systems and applications.
- Produce actionable; risk-based reports on security assessment results.
- Assist with vulnerability remediation when necessary.
- Continuously improve risk models; metrics; reports; processes; and activities.
- Provide information security solutions compliant with the Risk Management Framework (RMF).
- Collaborate with the customer security organization to ensure RMF processes are followed, policy is translated to operational procedures, proper tools are leveraged and verification that security policy and procedures are enforced.
- Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
- At least 5 years of experience in information security, with a focus on cloud security.
- Deep knowledge and hands-on experience with Microsoft Entra, Intune, Defender, Security Center, Sentinel, Azure, Office 365 (O365).
- Familiarity with security frameworks and monitoring tools.
- Experience managing vulnerability mitigation and information security process in an enterprise environment.
- Proven ability to Lead customer-facing reporting and negotiation activities.
- Ability to produce and disseminate reports for vulnerability assessments and compliance reporting.
- Ability to learn complex computing environments quickly.
- Broad understanding of all aspects of IT and enterprise systems interoperability.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
#ZR
Skills Required
- Bachelor's degree in Information Security, Computer Science, or related field (or equivalent experience).
- At least 5 years of experience in information security with a focus on cloud security.
- Deep knowledge and hands-on experience with Microsoft Entra, Intune, Defender, Security Center, Sentinel, Azure, and Office 365 (O365).
- Familiarity with security frameworks and monitoring tools (including RMF and CMMC concepts).
- Experience managing vulnerability mitigation and information security processes in an enterprise environment.
- Proven ability to lead customer-facing reporting and negotiation activities.
- Ability to produce and disseminate reports for vulnerability assessments and compliance reporting.
- Ability to learn complex computing environments quickly.
- Broad understanding of IT and enterprise systems interoperability.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Paragone was founded in 2008 and is an Economically Disadvantaged Woman Owned Small Business (EDWOSB) concentrating on supporting the Federal Government. We focus on CIO support, RMF/Cyber support, e-learning/training, Communications, Industrial Hygiene/Occupational Safety and Health, and studies/analysis. Paragone’s vision: To be a trusted adviser to all of our clients supporting their objectives as if they are our own. Excellence We are committed to demanding more of ourselves than our clients do. Quality We are a process-oriented company with a quality culture focused on continuously improving all aspects of our operations. Integrity: We adhere to the highest moral and ethical principals at all times. Respect: We respect everyone’s rights and dignity at all times. Paragone derives its name from the Italian Renaissance in which one form of art (architecture, sculpture or painting) is championed as superior to all others. In our case, we strive to be the benchmark in all that we do by all that we support.
