Information Systems Security Officer
Role details
Job location
Tech stack
Job description
- Perform vulnerability/risk assessment analysis to support accreditation and other program protection activities for programs and applications in cloud environments-AWS, Azure, etc.
- Conduct analysis to ensure the proper Security Technical Implementation Guides (STIGs) for each system component are applied
- Support, implement, maintain, and monitor security and privacy controls in compliance with FISMA, FedRAMP, and NIST RMF requirements and guidance
- Plan, document, implement, assess, maintain, and monitor security and privacy controls in accordance with requirements, policies, standards, processes, and procedures documented in the NIST 800-53 family of security controls
- Interface with various entities such as Program Managers, Acquisition Program Managers, other DOD agencies, and vendors
- Assist the ISSM with Security Assessment and Authorization (A&A) processes for new and existing information systems, Public Trust Interim Secret Secret SSBI Top Secret TS/SCI CI Poly FS Poly CNWDI Yankee White DOE Q DOE L DHS Suitability Work Authorization * Will you at any time require any form of work authorization, visa, or other immigration sponsorship? * Salary Requirements * Have you previously worked for SMX or a subsidiary? * WE ARE AN EQUAL OPPORTUNITY EMPLOYER. Applicants and employees are considered for positions and are evaluated without regard to mental or physical disability, race, color, creed, religion, sex, gender, national origin, ancestry, age, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital status, familial status or any other legally protected status under applicable law or other similar factors that are not job-related. No question on the application is intended to secure information about these subjects. We encourage all qualified individuals to apply for employment. We also provide reasonable accommodation to qualified individuals with disabilities in accordance with the Americans With Disabilities Act and applicable state and local law. If you require assistance or a reasonable accommodation to complete the application or any aspect of the application process, please contact the Talent Acquisition team at talent@smxtech.com. All applicants must properly complete this employment application; failure to do so may result in denial of employment. Rhode Island Applicants: PURSUANT TO THE WORKERS' COMPENSATION LAW SECTION 28-29-6, THE ORGANIZATION INFORMS YOU THAT IT IS SUBJECT TO THE WORKERS' COMPENSATION LAWS. IF YOU PROVIDE FALSE INFORMATION ABOUT YOUR ABILITY TO PERFORM THE ESSENTIAL FUNCTIONS OF THE JOB WITH OR WITHOUT ACCOMMODATION, YOU MAY BE BARRED FROM FILING A CLAIM UNDER THE PROVISIONS OF THE WORKERS' COMPENSATION ACT OF THE STATE OF RHODE ISLAND. * I have read and agree to the SMX Data Privacy Policy. *
https://www.smxtech.com/careers/data-policy/ I agree to the Conditions of Application and Employment statement below. *
I understand that any false statements in this application may be cause for rejection or termination of my employment with SMX. I also grant permission to SMX to obtain employment records and reasons for termination from my previous employers, and to obtain information from my references. I hereby authorize this electronic signature submittal to serve as my legal signature. * Enter Full Legal Name *
Requirements
- Bachelor's degree with 3 years Cyber and/or IA experience, or Associate degree with 4 years of experience, or a High School diploma or equivalent with 9 years of experienced degree in Cybersecurity, Information Security, Information Assurance, or similar related discipline preferred
- Clearance: TS - TS with SCI eligibility preferred)
- Experience with different Cloud Platforms (ie AWS, Azure, Google)
- Experience in Information Assurance, Information Technology, and Information Management concepts, processes, procedures, and support of IT systems
- Experience in an ISSO or similar Information Assurance role supporting DoD information systems/applications
- Working knowledge of DISA STIGs and STIG tools (SCAP)
- Minimum IAT Level II/IAM Level I certification (ie Security+ CE)
Desired Skills/Experience
- Experience with auditing security controls
- Experience with RMF management tool such as eMASS or Xacta
- Knowledge on DoD Acquisition
- Cloud certification
#cjpost #LI-KK1
Benefits & conditions
The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $108,000-$143,000 USD
At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what's possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.
SMX is an Equal Opportunity employer including disabilities and veterans.
Selected applicant may be subject to a background investigation and/or education verification.
SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer)., As set forth in SMX's Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Are you Hispanic/Latino? Please identify your race Race & Ethnicity Definitions
If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:
A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.
A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status