Information System Security Officer 2 – Mid-Level

Overview

At The One 23 Group, our mission is to set the benchmark for excellence in government services. We empower our clients in the Department of Defense, intelligence community, and federal civilian sectors to excel with our advanced capabilities. Our dedication lies in fostering a people-first culture, underpinned by steadfast ethical principles. Embracing innovative technologies and process improvements, we are steadfast in our journey toward a future that is both bright and transformative.

Our expertise spans consulting and analytics, digital workplace solutions, and cyber compliance. With our global footprint, we place a strong emphasis on nurturing our people and culture, which forms the core of our successful strategies in leadership and financial management. We pride ourselves on our extensive experience and effective approach, ensuring that we lead with both innovation and integrity.

Responsibilities

Contractor to provide cyber security management, oversight, and customer support for maintaining the continuity of DHS Management Information System compliance in accordance with DHS, National Institute of Standards and Technology (NIST), and other applicable Federal standards. This Position is 100% Remote.

• Applies specialized knowledge of sensitive system Cybersecurity requirements and Privacy Act requirements. 
• Applies specialized knowledge and experience with the implementation of the NIST Special Publication (SP) 800 family of publications, particularly those associated with NIST’s Risk Management Framework and the Federal Risk and Authorization Management Program (FedRAMP).
• Applies specialized knowledge and experience with evaluating system, network, or infrastructure security controls against requirements such as FISMA, Federal Information Processing Standards (FIPS, and NIST guidelines.
• Applies knowledge of DHS Information Security Policy Directives and Handbooks is preferred.
• Applies knowledge and experience with standard IA concepts, practices, and procedures. Working independently to solve problems quickly and completely.
• Applies specialized experience with three (3) of the four (4) following criteria is required:
  • Vulnerability scanning execution, assessment, and analysis.
  • Operating system and network knowledge (i.e., Local Area Networks [LAN] and Wide Area Networks [WAN]).
  • Information security and assurance principles (e.g., Defense-in-depth) and associated supporting technologies.
  • Application security, database security, and network security.
• Possess ability to assess and weigh current and evolving security threats in an operational environment.
• Possess good oral and written communication skills.
• Team player who can collaborate with multiple stakeholders to arrive at the best solution. 

Qualifications

• Master’s degree and 4 years of Cybersecurity & Federal Information Security Modernization Act (FISMA) experience, or a Bachelor’s Degree and 5 years of Cybersecurity & FISMA experience or a total of 7 years of Cybersecurity & Federal Information Security Modernization Act (FISMA) experience
• Must be a US citizen with ability to obtain/maintain a Top Secret clearance
• Possesses one (1) of the following professional security certifications or can be obtained within six (6) months of hire:
  • Certified Information System Security Professional (CISSP)
  • CompTIA Advanced Security Practitioner (CASP)
  • Certified Information Systems Auditor (CISA)
  • Certified Ethical Hacker (CEH)
  • Systems Security Certified Practitioner (SSCP)
  • Certified Information Security Manager (CISM)
  • GIAC Information Security Professional (GISP)
  • GIAC Security Leadership (GSLC)