Information Systems Security Officer - E1

Standard Job Description

This position requires the ability to obtain a Secret clearance. Must be a U.S. Citizen.

The Cybersecurity Associate will partner with the security team, program, and government customers to perform as an Information Systems Security Officer (ISSO) in Sunnyvale, CA.

In this role you will:

- Oversee day-to-day information system security operations including hardware and software implementations.
- Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
- Auditing of the IS.
- Upkeep, monitor, analyze, and respond to network and security events.
- Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame.
- Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
- Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented in accordance with baseline.
- Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
- Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle.
- Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance.
- Assist and conduct security IS education.
- Participate in internal/external security audits/inspections; performs risk assessments.
- Inform ISSM on technical IS security matters.
- Assist in conduct of investigations of computer security violations and incidents, reporting as necessary to both the Contractor Program Security Officer (CPSO) and Program Managers.
- Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
- Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO.
- Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO.
- Review and oversee RMF Package authorizations together with ISSM and CPSO.

Basic Qualifications

• Ability to obtain a Secret Clearance; must be a U.S. Citizen
• DoD 8570 IAT Level II (SEC+) certification or ability to obtain within 6 months of hire
• Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education.

Desired Skills

• Knowledge of network security (e.g., encryption, firewalls, authentication, perimeter protection).
• Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
• Knowledge of Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), classified computer operations and experience with the technical configuration requirements for various operating Systems
• Knowledge of executing Security Hardening on diverse LINUX and Windows Operating Systems based on approved DISA STIGs and SRGs.
• Knowledge of with Risk Management Framework (RMF) as Subject Matter Expert (SME)
  implementation across multiple phases of a large program.
• Knowledge of configuring Windows, Networking, and NIX-based operating systems IAW DISA STIGs
• Knowledgeable in Solaris/UNIX/Linux command line
• Prior Information System Security Engineer (ISSE) or System Administration experience.