Information Systems Security Officer (ISSO)

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

This position is CONTINGENT upon funding, an open position, customer approval, completion of a favorable background investigation, and the ability to obtain and maintain our customer's sensitive clearance. 

An experienced Information Systems Security Officer (ISSO) is needed to join the security team of a major nationwide organization, with thousands of sites, to continually improve its complex multi-protocol nationwide network.

* Exposure to Microsoft 365 and any secure large transfer technologies is preferred.

We are looking for individuals with any of the following specific skill sets:

• An ISSO with cloud expertise, and preferably the ability to teach
• An ISSO with mobile experience, and cryptocurrency / block chain experience
• An ISSO with SCADA, infrastructure protection, and / or engineering experience

Job Responsibilities:

• Serves as an Information Systems Security Officer (ISSO) and as a member of the leadership team of a major nationwide networked operation.
• Ability to manage responsibility for security assessments of a variety of applications or domains, to include cloud computing, and to manage several project/initiatives of large size, complexity, and risk.
• Reviews system security packages and Accreditation status
• Provides continuous security monitoring of assigned systems
• Provide advice and insight into the overall management and evaluation of the system/application security posture.
• Audit and enforce security policies and standards for the Federal Agency customer.
• Assist in documentation and accreditation of systems governed by NIST standards and FISMA regulations.
• Liaison with the CISO and other leaders
• Contribute to policy implementation as it relates to COOP and DR
• Ensure organization preparedness considers factors and goals in Federal Preparedness Circular 65 (FPC-65)
• Ensure that Emergency Response Leadership is informed of relevant training and exercise activities and metrics
• Coordinate across the organization to ensure that all team members participate as needed

Required Skills:

• Must have experience with the following:
  • Cloud expertise, and the ability to teach
  • Mobile experience, and cryptocurrency/block chain experience
  • SCADA, infrastructure protection, and/or engineering experience
• Must be eligible to obtain a sensitive clearance – Position of Public Trust – and may be required to obtain a higher security clearance.
• Ability to manage responsibility for security assessments of a variety of applications or domains, to include cloud computing, and to manage several project/initiatives of large size, complexity, and risk.
• Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
• Demonstrated proficiency in successfully evaluating and supporting documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.
• Demonstrated proficiency in ensuring appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
• Demonstrated ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.
• Experience with network and vulnerability scanning tools and technologies to interrogate systems for configuration and status.
• In-depth understanding of security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with A&A policies.
• Excellent communication and interpersonal skills.
• Must have 5+ years of relevant work experience

Required Education:

Bachelor’s Degree in related field. In lieu of degree, two years of related work experience may be substituted for each year of degree level education.

Desired Certifications: