BlackLynx is seeking a full-time, on-site role for an Information Systems Security Officer/Manager at BlackLynx in Chantilly, VA. The Information Systems Security Officer/Manager will be responsible for ensuring and maintaining the security and integrity of our government sponsored computer network by managing cybersecurity protocols, implementing information security measures, and overseeing physical and network security.The ISSO/M shall perform daily task involving system compliance validation, vulnerability management response coordination, data transfer (Low to High and High to Low), and ongoing audit review and correlation, as well as general support to ongoing continuous monitoring activities.Location: Chantilly, VAResponsibilities:
Comply with the ISSO/ISSM Roles and Responsibilities aligned to IAM Level II or higher role
Manage security-related program milestones/deadlines to meet contract requirements
Support Assessment and Authorization (A&A) requirements and process and apply ICD 503, NISPOM, and other federal guidelines in support of systems used at contractor facilities
Develop and continuously update all Security Authorization documentation as required by the customer and in accordance with applicable Risk Management Framework (RMF) packages using the current customer approved templates, forms, regulations, and methods. These documents include, but are not limited to: SSP, SAR, Contingency Plan, IR Plan, CM Plan, SOPs, POAMs & Remediation Plans
Provide timely and detailed responses to all data calls.
Oversee and respond to security gaps/needs with information systems
Create and update Body of Evidence for system accreditation using ServiceNow or similar risk management software (NIST 800-53)
Develop and enforce cyber security policies and procedures for accredited systems
Coordinate with customer to guide systems through the government accreditation process to achieve Approval to Operate
Review requests for software and hardware changes to systems, and submit for customer approval where required
Work closely with system administrators to address open vulnerabilities
Manage the plan of action and milestones (POA&Ms) by working with the Systems Administrator, managers and engineers to develop schedules and engineering actions that mitigate open items
Maintain, update and conduct routine vulnerability and compliance scans across sponsor networks using NESSUS, or similar software
Configure and perform weekly system audit's (review of logs) and related continuous monitoring tasks
Review and interpret new government security policies for applicability
Perform cybersecurity activities, including change management, account management, auditing, media protection, user training, file transfers, etc
Provide oversight and guidance regarding requests to modify technical policies such as firewall rules, ports, protocols, etc. for each IT system.
Continuously maintain a thorough understanding of all configurations, architecture, installed software, accounts (both Operating System and Application), data flows, ports, protocols, and other relevant data for each IT System.
Participate in the remediation, documentation, and reporting of all incidents for the accredited system(s)
Collaborate with and support the corporate Information Assurance team on all cyber incidents and data spill clean-up
Performs other duties as assigned.
4-6 years of prior ISSM/ISSO or alternate ISSM/ISSO experience
Active Top Secret security clearance with CI Poly
Self-starter with the ability to work independently
Bachelor of Science degree in Information Systems, cybersecurity, Network Systems Technology or related field or at least 4 years of directly related experience in lieu of degree or any equivalent combination of education, experience, training and certifications
DoD 8570 IAT II Certification (Security+, CISSP, CISM, CASP+)
Experience with Authority to Operate (ATO) process, continuous monitoring, POA&Ms, Security Authorizations (SA), NIST 800-37, NIST 800-53 Rev4/ Rev5, NSM 8 and working with System Owners (SO)
Familiarity with information system security principles of NIST 800-171,
In-depth knowledge of NIST special publications, CNSS policies and instructions
Proficient in the use of tools used to prevent and/or negate malicious code (e.g HBSS, Anti Malware,)
System Admin or other technical experience
Ability to review, analyze, and interpret technical procedures against customer security requirements
In depth knowledge with ServiceNow (SNOW)
Strong communication skills, both written and verbal
Preferred:
Linux experience - intermediate level
Cloud experience (AWS preferred)
Jacobs is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Learn more about your rights under Federal EEO laws and supplemental language.