CRM Information Security Systems Officer

Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations.  The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations. 

 Primary Responsibilities 

• Conduct risk assessment of CBP systems including data gathering, research, and coordination. 
• Analyze of control applicability and implementation statuses for enterprise risk assessments. 
• Integrate the NIST Cybersecurity Framework (CSF) in NIST 800-53 controls analysis.   
• Conduct analysis on the effectiveness of POA&M management when conducting risk assessments. 
• Analyze MITRE Tactics and Techniques for CBP’s CTI Threat Actors and additional threat actors targeting system.​ 
• Prioritize system assets based on impact levels.​ 
• Identify Response activities, including Contingency Plan, data backups, alternate processing sites, etc. ​ 
• Prioritize recommendations to mitigate risk levels.​ 
• Apply knowledge of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC) to daily activities.   
• Analyze SSPs, Risk Assessment Reports or security related documentation. 
• Formulate security compliance requirements for systems. 
• Identify security issues when reviewing security documents. 
• Utilize CBP’s intelligence/security tools to capture data points for Risk Assessments: 
• Axonius, CrowdStrike, Swimlane, CSAM, Splunk, ARM (Active Risk Manager), Digital Guardian, Recorded Future. 
• Support CBP Component - Cybersecurity Acquisition Risk Management (C-CARM) in establishing an effective security infrastructure by ensuring CBP program cybersecurity threats and risks are identified, assessed, and documented throughout the acquisition lifecycle. 
• Monitor Body of Evidence (BoE) for each Acquisition Decision Event (ADE) and actively communicate concerns to promote programs milestone success. 
• Organize and secure program BoE by regulation of Teams channel. 
• Communicate between Programs and cybersecurity risk assessment functionaries. 
• Support C-CARM in guiding programs on the methodology and sequence for consistent and concise Threat Assessment. 
• Ensure the C-CARM SOP is up-to-date and consistent with current processes. 
• Create various PowerPoint Presentation briefs for the respective Gov’t leads. 

Basic Qualifications 

• Bachelors’ degree in Computer Science, Engineering, Information Technology, Cyber Security, or related field and 8 years of related experience.  Additional years of experience and cyber certifications may be considered in lieu of degree. 
• Familiar with the management, operational, and technical aspects of IT Security in a complex enterprise environment.  
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques/tools.
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements.
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
• Must be able to obtain and maintain a Public Trust clearance specific to this customer. 

 Preferred Qualifications 

• Experience in reviewing results from Operating system, application and Database scans. 
• Experience in vulnerability reviewing, analysis and management. 

Preferred certifications: 

CAP, CISM, CISSP, CISA, CASP, CEH, GCED, CRISC, Sec + 

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”