Scientific Research Corporation · 3 weeks ago
Cyber Range Information Systems Security Officer (ISSO)
Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry. They are seeking a Cyber Range Information Systems Security Officer (ISSO) to support Assessment & Authorization processes, monitor cybersecurity posture, and assist in incident response activities.
Biotechnology
Responsibilities
Supporting A&A processes (Assessment & Authorization) by developing artifacts, implementing policies, assessing security controls, and ensuring compliance with Federal, DoD, and Intelligence Community (IC) standards
Monitoring and assessing cybersecurity posture by conducting regular vulnerability and compliance assessments, reviewing system security configurations, and coordinating responses to potential threats and incidents
Assisting in the implementation of security solutions, including firewalls, IDS/IPS, and endpoint protection software, and assist with their configuration and testing
Conducting risk assessments and assisting in identifying and mitigating cybersecurity risks based on system vulnerabilities, potential threats, and overall risk exposure
Tracking and managing security risks through a Plan of Action and Milestones (POA&M), ensuring corrective actions are applied, documented, and closed within established timelines
Assisting in incident response activities, including analyzing security incidents, escalating as needed, and performing root cause analysis for systemic vulnerabilities
Collaborating with the Government’s security team to ensure security controls are implemented and continuously updated to address new and emerging threats
Maintaining and updating documentation for system security policies, standards, and procedures related to cybersecurity
Providing support for security audits, risk assessments, and continuous monitoring activities
Supporting the creation and execution of incident response plans, ensuring that mitigation strategies are in place and that security incidents are handled swiftly and efficiently
Qualification
Required
Bachelor's or master's degree in information systems, Cybersecurity, or related field, or equivalent combination of education and experience
Minimum of 5-8 years of direct experience in cybersecurity, with at least 3 years of hands-on experience in an ISSO or security role, preferably with DoD or government entities
Current Top-Secret clearance with SCI eligibility or ability to obtain SCI clearance
Demonstrated experience with cybersecurity principles and risk management frameworks (RMF, NIST, etc.)
Comprehensive knowledge in key cybersecurity areas including incident response, security control implementation, risk analysis, and system assessments
Ability to plan, assess, and implement security controls, monitor system security, and track issues to resolution
Experience working with and supporting cybersecurity governance and regulatory compliance requirements
Strong ability to communicate security issues, risks, and mitigations to stakeholders at various levels (technical and non-technical)
Team-oriented with leadership potential to guide and mentor junior staff as needed
Proficient in using security tools such as SIEM, vulnerability scanners, security technical implementation guide (STIG) and risk management systems
Preferred
Certifications: Certified Information Systems Security Professional (CISSP)
Certifications: Certified Information Security Manager (CISM)
Certifications: Certified in Risk and Information Systems Control (CRISC)
Certifications: Offensive Security Certified Professional (OSCP)
Certifications: Additional DoD security certifications (e.g., IAM, IEM)
Extensive DoD experience and knowledge of DoD Cybersecurity policies and frameworks
Experience working in Sensitive Compartmented Information (SCI) environments
Knowledge of vulnerability management and compliance tools and their integration into risk mitigation strategies
Benefits
Medical, dental, and vision plans
401(k) with a company match
Life insurance
Vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually
11 paid holidays
Tuition reimbursement
A work environment that encourages excellence
Company
Scientific Research Corporation
Scientific Research Corporation provides innovative solutions to the U.S. government, private industry, and international markets.