Full-Time
Information System Security Officer
Isso
CGS Federal (Contact Government Services)
Compensation Overview
$120k - $200k/yr
New York, NY, USA
In Person
Category
 IT & Security (1) |
|---|
Required Skills
Linux/Unix
Requirements
- Background in systems administration, software development, systems engineering, or deep familiarity with Linux-based systems.
- Experience accrediting IT systems against U.S. Government standards such as NIST SP 800-53, CNSSI 1253, and DISA STIGs.
- Hands-on experience supporting accreditation using eMASS or Xacta.
- Experience collaborating with engineering teams to implement and validate security configurations.
- Understanding of configuration management and automation tools (e.g., Puppet, Terraform, CloudFormation, Chef, Ansible).
- Comfort using version control systems such as Git.
- Ability to independently use vulnerability scanning tools such as Nessus and OpenSCAP.
- Experience working in cloud and on-premises environments, including AWS.
- Strong ability to produce clear, concise technical documentation, stay organized, and maintain attention to detail.
- Curiosity, critical thinking, and the ability to evaluate real-world implementations against formal security requirements.
- Active TS/SCI Clearance or Eligibility
Responsibilities
- Act as the primary on-site point of contact for security and compliance requirements across one or more U.S. Government customers.
- Support system accreditation and authorization activities using frameworks such as RMF or DIACAP.
- Collaborate with software, systems, and field engineers to ensure required security controls, configurations, and policies are correctly implemented.
- Analyze deployed software implementations and assess alignment with applicable security requirements.
- Build, standardize, and maintain security documentation, including SSPs, POA&Ms, control narratives, and supporting artifacts.
- Generate, validate, and organize evidence of compliance once security settings are applied.
- Assemble accreditation artifacts into a structured, auditable repository.
- Support audits, assessments, and ongoing compliance activities throughout the system lifecycle.
- Maintain the ongoing security and trust of customers through hands-on system access and coordination with engineering and operations teams.
- Support software operating across AWS, Azure, on-premises, and at multiple classification levels.
- Operate in environments where the platform, threat landscape, and operational needs are continuously evolving.