Description
Are you ready to join Leidos all-star team? Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelerate your career path.
The Leidos Defense Group is seeking an ISSM for a new Defensive Cyber Operations (DCO) in the Cloud solution in support of the premier Army C5ISR Cybersecurity Service Provider (CSSP) mission. This is an exciting opportunity to use your experience to help with an important cyber mission that has direct impact to our national security.
The ISSM will ensure implementation of security features for the detection of malevolent code, viruses, and adversaries. Develops risk assessment reports and remediation recommendations to other IT support personnel and Military Leadership. The ISSM will also ensure the unit’s information systems follow USA and DoD guidance. The ISSM may also support the supplier risk management lifecycle throughout all phases, and insider threat/risk programs. The ISSM supports and upholds the Information Assurance program for Information Systems within Network Environments. The ISSM constructs and implements system information security standards and procedures, ensuring functionality and security of units Information Systems.
Primary Responsibilities
- Oversees Information Assurance and Risk Management Framework processes and performs duties as ISSM for the Army DCO mission for a new TS Cloud environment
- Ensure other IT support personnel monitor all available resources that provide warnings of system vulnerabilities or ongoing attacks
- Communicates with internal and client project team members. Works to implement solution designs and/or processes in hardware, software, data, and procedures.
- Coordinates with personnel on system security compliance and Information System Authority to Operate.
- Ensure Configuration management policies and procedures for authorizing the use of hardware/software on an IS are followed.
- Coordinate Information Security Reviews , Security Inspections, and Tests
- Assesses system security threats/risks.
- Validates system security requirements definitions and analysis.
- Assists with assessment and authorization process as needed.
- Tracks and validates security incidents and may be required to investigate, document, report, and provide future protective and corrective measures in response to such incidents.
- Ensure proper measures are taken when an incident or vulnerability is discovered
- Leads Leadership Briefings on system security compliance and Information System Authority to Operate (ATO) compliance, expiration and actions.
- Implements the Risk Management Framework (RMF) methodology to successfully implement an information technology process which shall effectively protect the element's information assets and its ability to perform its mission.
- Populates and maintains RFM database (eMass) with bodies of evidence to support system accreditation actions.
- Collaborates with the Program Managers, Army Information Assurance Program Managers, ISSOs, ISSEs and configuration managers to maintain an effective risk assessment process.
- Ensures data stewardship (confidentiality, integrity, and availability) is established for each IS, and specific requirements are enforced.
Basic Qualifications
- Bachelor’s degree and 12+ years of experience in Information Security and 10 years of experience in Information Security .Additional experience may be considered in lieu of a degree.
- 10 + years of experience within the information technology job field.
- Must possess a current DoD Top Secret/SCI clearance single-scope background investigation. TS with current SCI eligibility accepted. Lower level clearance with eligibility to upgrade considered for right skill set and level of experience.
- DoD 8570 IAM Level II certified.
- Knowledge of RMF process, eMass workflow tools
- Experience using relevant systems and databases.
- Knowledge of RMF policies and procedures relating to information technology in a TS environment
- Experience working with cloud computing and infrastructure (AWS, Azure, etc.)
Preferred Education/Qualifications:
- Bachelor’s degree in a STEM discipline (Computer Science, Engineering, Mathematics, etc.)
- AWS Security Engineering Course
- ISC2 Certified Information Systems Security Professional Course
- ISC2 Certified Cloud Security Professional Course
- Experience working with Jira and Confluence
- Experience with Army policies and procedures
Pay Range:
Pay Range $118,300.00 – $182,000.00 – $245,700.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
To apply for this job please visit itjobpro.com.