Information Systems Security Officer (ISSO) at Modern Technology Solutions Inc

Chantilly, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

07 Apr, 26

Salary

0.0

Posted On

07 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Policy Implementation, Configuration Management, System Patching, Risk Management, Security Compliance, Continuous Monitoring, Security Audits, Collaboration, Documentation, Security Enhancements, Analytical Skills, Problem-Solving, Communication Skills, Network Security, Application Security, Cloud Security

Industry

Space Research and Technology

Description

Essential Job Functions Security Policy Implementation: Develop, implement, and enforce security policies, standards, and procedures to ensure the protection of information systems. Configuration Management: Ensure that all information systems are configured securely according to organizational policies and best practices. System Patching: Perform system patching in response to IAVAs and other security findings and requirements Risk Management: Conduct risk assessments to identify and mitigate potential security threats. Assess the impact of changes in the IT environment and update the risk management framework accordingly. Security Compliance: Ensure that information systems comply with relevant government and industry standards, such as NIST, FISMA, and DoD regulations. Prepare and maintain documentation to demonstrate compliance. Continuous Monitoring: Implement continuous monitoring processes to detect and respond to security vulnerabilities and threats. Utilize tools like SIEM (Security Information and Event Management) to monitor system activities. Security Audits: Conduct regular security audits and assessments to evaluate the effectiveness of security measures and identify areas for improvement. Collaboration: Work closely with other IT and security professionals to ensure a coordinated approach to cybersecurity. Liaise with external stakeholders, such as auditors and regulatory bodies, as needed. Documentation: Maintain comprehensive documentation of security policies, procedures, and measures taken to secure information systems. Prepare reports for management on security status and incidents. Security Enhancements: Recommend and implement security enhancements to improve the overall security posture of the organization. Stay updated with the latest security trends and technologies. Required Qualifications and Skills 2-5 years’ experience in role Proficiency in using security tools and technologies, such as firewalls, intrusion detection/prevention systems, SIEM, and endpoint protection. Knowledge of network security, application security, and endpoint security principles. Understanding of operating systems (Windows, Linux, etc.) and their security configurations. Familiarity with cloud security best practices Familiarity with RMF process Experience with Spunk or other similar applications Experience with security compliance and regulatory requirements. Strong analytical and problem-solving abilities. Capability to analyze complex security issues and develop practical solutions. Excellent written and verbal communication skills. Ability to effectively communicate technical information to non-technical stakeholders. Education Requirements: Bachelor’s degree in Computer Science, Information Technology, or related field Certifications Requirements: COMPTIA Security + / CISSP DESIRED AWS certification (e.g., AWS Solutions Architect Associate or Professional) Clearance Requirements: TS/SCI clearance and CI Polygraph U.S. Citizenship is required for this position. Work Location: Chantilly VA (in person, full time) For additional company information, please visit: www.mtsi-va.com #LI-JW1 #LI-Onsite

Responsibilities

The Information Systems Security Officer (ISSO) is responsible for developing and enforcing security policies, managing system configurations, and conducting risk assessments. They will also ensure compliance with security standards and implement continuous monitoring processes.