Information System Security Officer (ISSO)

Yakshna Solutions, Inc., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, Virginia, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serve its business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.

We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, Life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.

YSI is seeking a highly qualified Information System Security Manager. The selected candidate will be able to communicate effectively (written/verbal), possess strong interpersonal skills, be self-motivated, and be innovative in a fast-paced environment.

Functional Responsibilities:

• The Information System Security Manager (ISSM) performs a variety functions which are broad in nature and support multi-tier Information Security/Assurance, Computer Network Defense, and Offensive Cyber functions to include, but not limited to:
• Systems security engineering, audit/inspection
• Assessment and Authorization (A&A) support, independent verification and validation (IV&V) testing, certification and accreditation (C&A) support, risk and vulnerability assessments.
• Perform intrusion detection, penetration testing, Red Team support, Forensic IR/LE and response/remediation support services. Works with outside organizations to analyze trends.
• Directs tasks of junior and intermediate level team members. Resolves technical and nontechnical conflicts among task team.
• Perform security operations on AWS Cloud, VM, Microsoft Windows environments using tools such as SCAP scanner, HP Fortify
• Review weekly DCBS vulnerability scan results and notify the stakeholders and coordinate with DCBS PMO on the code scan results for releases
• Review eMASS weekly to ensure accuracy of DCBS vulnerability scan POA&Ms and coordinate with DCBMS PMO for DISA STIG checklists
• Coordinate with DCBS PMO and stakeholders for PPS updates
• Support Security Assessment Plan, Security Impact Plans.
• Responsible for all Enterprise Security Services (ESS) and Information System Security Management (ISSM) functions including all testing, analysis, and RMF artifact and documentation in adherence with the Certification and Accreditation (C&A) requirements RMF and ATO approval.
• Perform daily information assurance monitoring, analysis and reporting tasks
• Perform testing and validation of RMF security controls.
• Perform HBSS/Splunk scans to identify security control vulnerabilities
• Ensure standardization of security documentation to include engineering, security testing, auditing, and intrusion detection functions.· Responsible for all Enterprise Security Services (ESS) and Information System Security Management (ISSM) functions including all testing, analysis, and RMF artifact and documentation in adherence with the Certification and Accreditation (C&A) requirements RMF and ATO approval.
• Perform daily information assurance monitoring, analysis and reporting tasks
• Perform testing and validation of RMF security controls.
• Perform HBSS/Splunk scans to identify security control vulnerabilities
• Ensure standardization of security documentation to include engineering, security testing, auditing, and intrusion detection functions.

Required Skills and Qualifications:

• Clearance Level: Secret
• Bachelor of Science Degree (Additional 4 years’ experience in lieu of BS Degree)
• 5 years’ experience Cybersecurity, ATO, RMF functions
• IAT Level II - Security CE

Job Types: Full-time, Contract

Pay: $120,000.00 - $130,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Vision insurance

Compensation package:

• Yearly pay

Experience level:

• 5 years

Schedule:

• 8 hour shift
• Monday to Friday

Experience:

• Cybersecurity: 5 years (Required)
• ATO: 5 years (Required)
• RMF: 5 years (Required)
• ISSM: 5 years (Preferred)

License/Certification:

• CompTIA Security (Required)

Security clearance:

• Secret (Required)

Work Location: In person