Cyber Security Specialist (ISSO)

Cyber Security Specialist (ISSO)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

What You'll Get To Do:

Serve as a Cybersecurity Team member responsible for the Information Assurance and Security of application, database, and enterprise network services. Responsible for activities associated with delivery of Cybersecurity policy implementation associated with customer-defined systems and software projects; basic responsibilities include:

• Responsible for managing certificates using the Venafi tool.
• Apply information security in accordance with National/DHS/CBP directives security policy including, but not limited to, NIST SP 800-30, NIST 800-37, NIST 800-53a, NIST SP 800-61, NIST 800-171, DHS 4300A, CBP Handbook 1400-05D.
• Support creation of, and ensure approval for, Department of Homeland Security (DHS) Risk Management Framework (RMF) Assess and Authorize (A&A) Process for development and sustainment projects.
• Support program ISSO and customer management, and government Authorizing Official (AO) for all information security status, policies, and procedures.
• Document DHS RMF Security Implementation Plan artifacts.  Coordinate and assist development team with application artifact documentation.
• Assist government personnel in preparing and presenting Information Assurance Compliance System (IACS) packages to the Control Assessor (SCA) Assess and analyze the current threat environment.
• Identify, assess, and recommend zero-day cyber threat remediation.
• Supports reviews and audits of continuous system monitoring and contingency planning. Updates associated documentation as needed.
• Create and manage Plan of Action & Milestones (POA&M)
• Report and help investigate security-related incidents and security violations as requested by the Computer Security Incident Response Center (CSIRC)

You Will Bring These Qualifications:

• Must be a U.S. Citizen with the ability to pass CBP background investigation, criteria will include:
  • 3-year check for felony convictions
  • 1-year check for illegal drug use
  • 1-year check for misconduct such as theft or fraud
• College degree (B.S., M.S.) in Information Assurance, Computer Science, Information Management Systems or a related discipline
• Certifications: minimum Security+ CE or equivalent, CISSP or CASP preferred
• Demonstrated knowledge DHS 4300A, “Sensitive Systems Handbook”, and CBP Handbook 1400-05D, “Information Systems Security Policies and Procedures Handbook”
• Demonstrated knowledge of NIST Information Technology Security Special Publications (SP) 800 series, with emphasis on NIST SP 800-37, “Guide for Applying the Risk Management Framework to Federal Information Systems” and NIST SP 800-53A, “Guide for Assessing the Security Controls in Federal Information Systems”
• Professional Experience: three to four (3 - 4) years related technical experience
• Working knowledge of and ability to assist others in the use of information security provisioning and monitoring tools to support process improvement
• Working knowledge of Federal Information Security Management Act (FISMA) reporting requirements and processes
• Ability to apply advanced principles, theories, and concepts, and contribute to the development of innovative IA principles and ideas
• Experience working on unusually complicated problems and providing solutions that are highly creative and ingenious, exhibiting ingenuity, creativity, and resourcefulness
• Experience with continuous integration tools and environments
• Acting independently to expose and resolve problems
• Demonstrated experience with HP Fortify Software Security Center
• Demonstrated experience with Tenable Nessus Vulnerability Scanner
• Demonstrated experience with DISA Security Technical Implementation Guide (STIG) implementation and Security Content Automation Protocol (SCAP) tool usage
• Demonstrated familiarity and experience with Firewalls, Intrusion Prevention Systems, WebGateways, and/or enterprise Antivirus software technologies
• Demonstrated experience using CSAM
• Demonstrated ability to identify and manage risk
• Understanding all elements of the DHS and CBP Cybersecurity policies and requirement
• Excellent written and verbal communication skills
• Strong collaboration skills and desire to work within a team
• Highly responsible, team-oriented individual with very strong communication skills and work ethic; self-starter

This position is conti