Information Systems Security Officer

SRC, Inc.is currently seekingan Information System Security Officer.

As an ISSO, you will ensure that operational security is maintained for SRC's information systems (IS) in accordance with internal security policies and our system security plan.

What You'll Do


* Ensure systems are operated, maintained and disposed of in accordance with internal security policies and the system security plan


* Ensure that all users have the requisite security clearances, authorization need-to-know, and are aware of their security responsibilities before being granted access to IS


* Report on all security-related incidents


* Initiate protective or corrective measures when security incident or vulnerability is discovered


* Conduct periodic reviews to ensure compliance with SSP


* Ensure configuration management for security relevant IS software, hardware and firmware are maintained and documented


* Ensure system recovery processes are monitored to ensure security features and procedures are properly restored


* Ensure all IS security-related documentation is current and accessible to properly authorized individuals


* Formally notify the appropriate individuals when changes occur that might affect accreditation


* Ensure that system security requirements are addressed during all phases of the system life cycle


* Follow procedures for authorizing software, hardware and firmware use before implementation on the system


* Create/provide security education and awareness training to cleared employees

What You'll Bring


* Bachelor's degree in cyber security related field with 0+ years of experience, or any equivalent combination of education, training and experience in lieu of degree


* Working knowledge of system functions, security policies, technical security safeguards, and operational security measures


* Hold U.S.

government security clearances/access approvals commensurate with level of information processed by the system


* Administrative knowledge of Microsoft operating systems


* Strong documentation skills


* Experience with LINUX variants such as Red Hat, preferred


* Strong customer service skills


* Minimum IAM Level I certification commensurate with DoD 8570.1M requirements (or ability to obtain certification within 6 months of hire)


* Working experience with RMF, CNSSI 1253, NIST SP 800-53/53A, STIGs, NISPOM Chapter 8, DAAPM Manual

Ways to Stand Out


* Working knowledge of security tools (e.g., ACAS, Nessus, HBSS, STIG Viewer, SCAP, Evaluate STIG, Manage Engine)


* Experience maintaining operational security posture in accordance with system security policies, procedures & standards

What Sets Us Apart?SRC, Inc., a not-for-profit research and development company, combines information, science, technology and ingenuity to solve "impossible" problems in the areas of defense, environment and intelligence.

Across our family of companies, we apply bright ...