A

ASEC

Defense engineering, IT, training, and logistics

Senior Information System Security Officer - Information System Security Officer

Security Governance, Risk & ComplianceUpdated on Nov 10
Full-timeRidgecrest, CA, USA

About the Job

Requirements

  • A CompTIA Security+ certification is required.
  • Candidates must possess a bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field; in lieu of a bachelor's degree, candidates must have at least 10 years of experience in Information Systems Security Officer or cybersecurity engineering roles and a Department of Defense-approved baseline certification such as CompTIA SecurityX, CompTIA Cloud+, CCSP, or equivalent.
  • At least 10 years of engineering experience, including at least 5 years in Information Assurance/Cybersecurity.
  • Demonstrated experience implementing the Risk Management Framework in accordance with DoDI 8510.01.
  • Extensive experience applying security controls outlined in CNSSI 1253, NIST SP 800-53, and JSIG.
  • Ability to conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP Compliance Checker with automated benchmarks.
  • Proven experience implementing DISA STIG configurations across operating systems and network devices.
  • In-depth knowledge of continuous monitoring, security audits, risk assessments, and mitigation planning for DoD systems.
  • Experience evaluating NIAP/Common Criteria technologies and the DISA Approved Products List.
  • Background preparing certification letters, memoranda of agreement, and authorization documentation for system interconnections.
  • Experience developing information assurance-related acquisition documentation.
  • Familiarity with Intelligence Community Directive 705, DoDD 5205.07, and DoD 5205.07-M Volumes 1–4.
  • Must be a U.S. citizen and hold an active DoD Top Secret clearance to start; employment cannot begin until a fully adjudicated Top Secret clearance and required program-specific access have been approved.
  • Must upload copies of relevant IT certifications.

Responsibilities

  • Lead the development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
  • Direct vulnerability management activities using ACAS, DISA STIGs, and SCAP Compliance Checker.
  • Oversee secure configuration of operating systems and network devices in accordance with DISA STIG requirements.
  • Manage continuous monitoring efforts, conduct security audits, and drive risk mitigation strategies.
  • Provide subject matter expertise on NIAP/Common Criteria certifications and DISA Approved Products List compliance.
  • Prepare and review authorization documentation, certification letters, and memoranda of agreement for system interconnections.
  • Advise program leadership, system owners, and engineers on Risk Management Framework compliance and cybersecurity best practices.

Desired Qualifications

  • Ability to build positive, collaborative relationships across teams and with external partners.
  • Effective verbal and written communication skills.
  • Proactive, self-directed work style and ability to operate independently.
  • Analytical thinking and problem-solving capabilities.
  • Strong organization and ability to balance competing priorities in a fast-paced environment.

About the Company

ASEC

Defense engineering, IT, training, and logistics

ASEC provides engineering, IT, training, and logistics services for the defense sector, focusing on mission success for the Warfighter, including design and maintenance of systems for manned and unmanned aircraft. It combines engineering design and maintenance with logistics support, custom Navy training, and hands-on instruction, plus test and evaluation, IT security, and flight operations to support Navy aircraft programs. It stands out because it is 100% employee-owned and offers an integrated suite of capabilities across multiple sites tailored to defense aviation needs. Its goal is to help the Warfighter achieve mission success by delivering precise, cost-effective solutions that ensure reliability and readiness of advanced Navy aircraft.

Company size
501-1,000
Company stage
Grant
Total funding
$2.3M
Headquarters
Maryland, United States
Founded
2004

Recently Posted Jobs

Explore more opportunities at ASEC

See more jobs