A

ASEC

Defense engineering, IT, training, and logistics

Information System Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeFallon, NV, USANo salary listed

About the Job

Requirements

  • A CompTIA Security+ certification is required.
  • Candidates must possess a bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. In lieu of a bachelor's degree, candidates must have at least 10 years of experience in Information Systems Security Officer or cybersecurity engineering roles and a Department of Defense-approved baseline certification such as CompTIA SecurityX, CompTIA Cloud+, CCSP, or equivalent.
  • Demonstrated knowledge of Information Assurance/Cybersecurity and the Risk Management Framework (DoDI 8510.01).
  • Knowledge of security controls and implementation delineated in Committee on National Security Systems Instruction 1253, National Institute of Standards and Technology Special Publication 800-53, and the Joint Special Access Program Implementation Guide.
  • Experience performing vulnerability assessments using Assured Compliance Assessment Solution, Defense Information Systems Agency Security Technical Implementation Guides, the Security Content Automation Protocol Compliance Checker, and automated benchmarks.
  • Experience implementing operating-system and network-device security configurations according to Defense Information Systems Agency-approved Security Technical Implementation Guides.
  • Experience performing security-control continuous monitoring, security audits, risk analysis, and mitigation strategy development for Department of Defense information systems.
  • Experience identifying Common Criteria and National Information Assurance Partnership-certified technologies and the Defense Information Systems Agency Approved Products List.
  • Knowledge of Intelligence Community Directive 705, DoD 5205.07, DoD 5205.07-M Volumes 1–4, Special Access Program policy, and the Joint Special Access Program Implementation Guide.
  • This position requires U.S. citizenship and an active Department of Defense Top Secret clearance with Sensitive Compartmented Information eligibility. Selected candidates will undergo a government security investigation and must meet eligibility requirements for access to classified information.
  • Ability to build collaborative relationships across teams and with external partners.
  • Effective verbal and written communication skills.
  • Ability to work proactively and independently.
  • Analytical thinking and problem-solving capabilities.
  • Strong organization and ability to balance competing priorities in a fast-paced environment.

Responsibilities

  • Propose, coordinate, implement, and enforce information-system security policies, standards, and methodologies.
  • Conduct vulnerability assessments using automated benchmarks and tools such as Assured Compliance Assessment Solution, Defense Information Systems Agency Security Technical Implementation Guides, and the Security Content Automation Protocol Compliance Checker.
  • Use SolarWinds or Splunk for system monitoring, security event analysis, and continuous compliance activities.
  • Implement operating-system and network-device security configurations according to Defense Information Systems Agency-approved Security Technical Implementation Guides.
  • Perform security-control continuous monitoring, review system security plans and related artifacts, conduct security audits and risk analysis, and develop mitigation strategies for Department of Defense information systems.
  • Identify Common Criteria and National Information Assurance Partnership-certified technologies and the Defense Information Systems Agency Approved Products List.
  • Prepare certification letters and memoranda of agreement with system owners for interface and networking implementations.
  • Guide cross-functional cybersecurity efforts to align with organizational and program goals and milestones.
  • Collaborate on documentation for Information System Authority to Operate decisions, including system security plans, standard operating procedures, plans of action and milestones, and knowledge articles.
  • Conduct risk assessments and vulnerability analyses to identify and mitigate potential threats to satellite communication infrastructures.

About the Company

ASEC

Defense engineering, IT, training, and logistics

ASEC provides engineering, IT, training, and logistics services for the defense sector, focusing on mission success for the Warfighter, including design and maintenance of systems for manned and unmanned aircraft. It combines engineering design and maintenance with logistics support, custom Navy training, and hands-on instruction, plus test and evaluation, IT security, and flight operations to support Navy aircraft programs. It stands out because it is 100% employee-owned and offers an integrated suite of capabilities across multiple sites tailored to defense aviation needs. Its goal is to help the Warfighter achieve mission success by delivering precise, cost-effective solutions that ensure reliability and readiness of advanced Navy aircraft.

Company size
501-1,000
Company stage
Grant
Total funding
$2.3M
Headquarters
Maryland, United States
Founded
2004

Recently Posted Jobs

Explore more opportunities at ASEC

See more jobs