Information Systems Security Officer

SAIC's Horizon 2 contract is seeking an energized and professional Information Systems Security Officer (ISSO) to support the contract's secure operating facilities in Colorado Springs, CO.  The Horizon 2 contract support the US Space Force Space Systems Command's Program Executive Office's overseeing the Space Domain Awareness and Combat Power, and Battle Management Command, Control and Communications portfolios.

You will support all facets of SAIC’s Information Protection Program at our Colorado Springs location.  You will assist the Information Systems Security Manager and provide oversight, guidance, and technical support, on IT and information system security issues affecting the mission of the customer, by implementing common information system security practices, policies, and standards. Your background in applying sound and effective Information Assurance security practices, in both Windows and Linux environments, will be the driving force behind the success of our customers missions.

Join us in safeguarding the nation's space assets and explore the limitless opportunities that await in this dynamic role. You'll have the invaluable opportunity to be mentored in this role, ensuring not only your professional growth, but also the continued excellence of our operations. You will get to use your strong communication (verbal and written) skills and interpersonal skills in a dynamic customer centric environment, which may require sporadic off-hours support. If this is what you are looking for, keep reading.

Fun stuff you will do on the job:

• Maintain an efficient operational security posture for programs and information systems.
• Perform vulnerability/risk assessments to support authorization and accreditation.
• Prepare and review Risk Management Framework documentation to include System Security Plans, Authorization to Operate packages, Risk Assessment Reports, Security Control Traceability Matrices, Plans of Action and Milestones, System Assessment Plans, and Continuous Monitoring Plans.
• Coordinate with program security officers or cognizant security officials on approval of External Information Systems (e.g., guest systems, interconnected systems).
• Conduct periodic reviews and evaluations of required IS policies, standards, and procedures.
• Coordinate Information System Security Assessments, tests, and reviews.
• Conduct due diligence and process hardware and software requests.
• Provide configuration management for information system security software, hardware, and firmware.
• Ensure proper measures are taken when an IS incident or vulnerability is discovered.

This is You:

• Bachelor’s degree (preferable Information Security related), 5+ years experience (4 years of experience may be used in lieu of degree) with:  
• Cybersecurity, information assurance, system administration, or equivalent combination to reflect knowledge and experience
• The Risk Management Framework, National Institute of Standards and Technology, Committee on National Security Systems cyber security requirements and guidance, and cyber security related risk management methodologies
• Program Security responsibilities to include, but not limited to: OPSEC, Program Protection, Personnel Security clearances, Security Training and Education, and Classification management
• Working in a SAP and/or SCI environment
• Controlling, labeling, virus scanning, and appropriately transferring data (upload/download) between information systems at varying classification levels
• Must have an in-scope security background investigation (T5 or SSBI), adjudicated for SCI eligibility and enrolled in the Continuous Evaluation program (if applicable). 
• Must be willing to be nominated for access to Sensitive Compartment Information and Special Access Programs and willing to consent to a Polygraph examination.
• Possess certification(s) that meet or exceed DoD 8140 IAT Level II requirements (ex. CompTIA Security+, CISSP).

You will wow us even more if you have these skills:

• A masters degree (preferably in cyber security, Information Security or related security studies).
• Knowledge and experience using DoD tools and capabilities for vulnerability assessments and compliance reporting (eMASS, XACTA, ACAS, STIGs, Nessus, SCAP, Splunk, etc.).
• Knowledge of the JSIG, ICD 503, NIST Risk Management Framework (RMF), NIST SP 800-53/53A, and CNSSI 1253, and the Assessment & Authorization (A&A) process.
• Experience with Incident Response and Disaster Recovery Procedures.
• Experience creating/updating plans, processes, and procedures, in support of system and data security requirements, as well as establishing artifacts required for system certification.
• Familiarity with virtualized hosting, such as VMware.
• Experience conducting security audits/system assessments of information systems.
• Extensive training or experience with Windows-based Information Systems with a working knowledge of LINUX operating systems.
• Understanding of Contractor Program Security Officer (CPSO) functions, responsibilities, and disciplines (i.e., PERSEC, PHYSEC, facility alarm operations, Security Training and Education, visitor access requests).
• Have an understanding of DD254s to support government contracts.