System Administration and Information Systems Security Officer ISSO in Hanover, MD
Job title: System Administration and Information Systems Security Officer ISSO in Hanover, MD at Nissint Technologies Llc
Company: Nissint Technologies Llc
Job description: Benefits:
- Company Funded HSA
- Company Paid Health Insurance
- 10% employer 401k contribution with no match required
- Company parties
- Flexible schedule
- Paid time off
- Prepare System Security Plans and assist with obtaining Authorizations to Operate
- Develop, review, and incorporate key risk-management accreditation artifacts such as system architecture, risk assessments, plan-of-action, data flows, hardware, and software lists.
- Collaborate with Information Systems Security Managers and Designated Accreditation Authorities to ensure systems are properly accredited and maintained.
- Ensure all package submissions meet necessary approval standards
- Implement continuous monitoring techniques to evaluate and maintain the system's security posture.
- Oversee the implementation of software patches and updates to maintain a strong security stance.
- Create tasking for developers and system administrators regarding necessary changes and patching activities.
- Enforce and implement information systems security policies, standards, and methodologies.
- Utilize vulnerability scanning tools to identify and document compliance issues.
- Review Audit Logs weekly to monitor system activity and ensure security compliance.
- Perform regular data transfers between specified locations.
- Maintain and report on the current status of assessments, authorizations, and any associated issues.
- Understand the privileged access process and support personnel with new requests and extensions.
- 7 years of system administration experience
- 4 years of ISSO experience
- One of the following security baseline certifications:
- CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP
- Experience with ICD 503/NIST 800-53 certification and accreditation process
- Experience with The Risk Management Framework
- Experience with Developing and maintaining SSPs
- Experience with IAVA review and handling
- Experience with Interpreting Security Scan results
- Experience with Interfacing with System Administrators and Software Engineers
- Experience with Task tracking systems
- Understanding of Public Key Infrastructure-based authentication
- Understanding of A variety of security policies, especially within the IC
- Understanding of fundamentals of technical security risk assessment
- Understanding of Understands how to perform analysis of alternatives
- Knowledge of current security tools
- Knowledge of Hardware/software security implementation
- Knowledge of Communication protocols (HTTPS, JMS)
- Knowledge of Encryption techniques/tools (PKI, TLS)
- Able to clearly communicate ideas and status updates to management and other stakeholders