Five years of work experience in a cybersecurity-related field, preferably as an Information Systems Security Officer, is required.
An active Top Secret clearance is required.
Current Certified Information Systems Security Professional (CISSP) certification is required.
Experience using and operating security tools such as Tenable Nessus and/or Security Center, IBM Guardium, HP WebInspect, or similar applications, and Network Mapper (Nmap), is required.
A bachelor's or advanced degree in Computer Science, Cybersecurity, Mathematics, or Engineering is highly desirable.
Responsibilities
Maintain day-to-day security for assigned information systems.
Ensure information systems are operated, maintained, and disposed of in accordance with security policies and practices in the FBI Information System Security Assessment Handbook and NIST Special Publication 800-53.
Ensure users have the required security clearances, authorization, and need-to-know, and understand their security responsibilities before access to information systems is granted.
Initiate protective and corrective measures when a security incident or vulnerability is discovered.
Monitor system recovery processes and ensure the proper restoration of information system security features.
Ensure configuration management for security-relevant information system software, hardware, and firmware is documented and maintained.
Support certification activities throughout the Information System Security Assessment process, formerly known as the Certification and Accreditation process.
Ensure system security requirements are complied with, unless waived, throughout all phases of system lifecycles.
Establish audit trails, ensure they are reviewed, and make them available when required to the Chief Security Officer or Information System Security Manager.
Retain audit logs in accordance with Department of Justice, Office of the Director of National Intelligence, and/or FBI policy.
Ensure awareness and precautionary measures are exercised to prevent the introduction or proliferation of malicious code; manage review and release of media and/or memory components.
Ensure general and privileged users are trained in the knowledge needed to safely operate and maintain the information systems they can access, including general security awareness and specialized privileged-user training.
Disseminate, control, and manage issuance of user identifications and passwords for assigned information systems, and provide authorized lists to appropriate system administrators.
Develop, implement, and enforce information systems security policies.
Maintain System Security Plans and all other system security documentation.
Develop other required system plans, including Configuration Management Plans, Contingency Plans, Continuity of Operations Plans, Disaster Recovery Plans as required, and Incident Response Plans.
Support risk assessment and evaluation activities throughout the Certification and Accreditation or site accreditation process.
Implement and maintain continuous monitoring.
Establish audit trails, ensure their review, and report all identified security findings.
Job Description
Security Clearance: Active Top Secret required
Responsibilities
Ensuring that day to day security is maintained for assigned information systems
Ensuring all Information Systems (IS)s are operated, maintained, and disposed of in accordance with security policies and practices outlined in the FBI's Information System Security Assessment (ISSA) Handbook and NIST publication series NIST 800-53
Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before they are granted access to the IS
Initiate protective and corrective measures when a security incident or vulnerability is discovered
Monitor system recovery processes and ensure the proper restoration of an IS security features
Ensure Configuration Management (CM) for security-relevant IS software, hardware, and firmware is documented and maintained
Support certification activities throughout the ISSA process (previously known as Certification and Accreditation process);
Ensure that system security requirements are complied with, unless waived during all phases of the system lifecycles
Establish audit trails and ensure their review, and make them available, when required, to the Chief Security Officer (CSO) or the Information System Security Manager (ISSM);
retain audit logs in accordance with Department of Justice (DOJ), Office of Director of National Intelligence (ODNI) and/or FBI policy
Ensure awareness and precautionary measures are exercised to prevent introduction and/or proliferation of malicious code; manage review and release of media and/or memory components
Ensure general users and privileged users are trained-in the specific knowledge needed for them to safely operate and maintain the ISs to which they have access, including general security awareness and specialized privileged user training
Disseminate, control, and manage the issuance of user identifications and passwords for assigned ISs, and provide authorized lists to appropriate system administrators.
Develop, implement, and enforce information systems security policies
Maintain System Security Plans (SSPs) and all other system security documentation
Development of other required system plans: Configuration Management Plan (CMP), Contingency Plan (CP), Continuity of Operations (COOP) and Disaster Recovery Plan (DRP) (as required), and Incident Response Plan (IRP)
Support risk assessment and evaluation activities throughout the Certification and Accreditation (C&A) or site accreditation process
Able to implement and maintain continuous monitoring
Establish audit trails, ensuring their review and reporting all identified security findings
Qualifications
5-years work experience in cyber security related field, preferably as an ISSO, required
Active Top Secret Clearance required
Current CISSP certification required
Experienced using and operating security tools such as, but not limited to: Tenable’s Nessus and/or Security Center, IBM Guardium, HP WebInspect, or like applications, and Network Mapper, (NMAP)
A Bachelors or Advanced Degree in Computer Science, Cybersecurity, Mathematics, or Engineering is highly desirable
Qualifications
Additional Information
All your information will be kept confidential according to EEO guidelines.