A

ASEC

Defense engineering, IT, training, and logistics

Information System Security Officer - Information System Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeRidgecrest, CA, USA$115k - $135k /yr

About the Job

Requirements

  • CompTIA Security+ certification is required.
  • A bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is required, or candidates must have at least 10 years of experience in Information Systems Security Officer or cybersecurity engineering roles and a Department of Defense-approved baseline certification such as CompTIA SecurityX, CompTIA Cloud+, CCSP, or equivalent.
  • U.S. citizenship is required.
  • An active DoD Top Secret clearance is required to start; employment cannot begin until the clearance is fully adjudicated and required program-specific access is approved.

Responsibilities

  • Propose, coordinate, implement, and enforce information system security policies, standards, and methodologies.
  • Conduct vulnerability assessments using automated benchmarks and tools such as ACAS, DISA STIGs, and SCAP Compliance Checker.
  • Implement security configurations for operating systems and network devices in accordance with DISA-approved STIGs.
  • Perform security control continuous monitoring, review system security plans and associated artifacts, conduct security audits and risk analysis, and develop mitigation strategies for DoD information systems.
  • Identify Common Criteria- and NIAP-certified technologies and products on the DISA Approved Products List.
  • Prepare certification letters and Memoranda of Agreement with system owners for interface and networking implementations.
  • Provide guidance on cross-functional cybersecurity efforts and ensure alignment with organizational and program goals and milestones.
  • Collaborate on documentation for Information System Authority to Operate decisions, including SSPs, SOPs, POA&Ms, and Knowledge Articles.
  • Conduct comprehensive risk assessments and vulnerability analyses to identify and mitigate potential threats to satellite communication infrastructures.

Desired Qualifications

  • Five years of experience with Information Assurance/Cybersecurity.
  • Five years of experience with the Risk Management Framework under DoD Instruction 8510.01.
  • Experience with security controls and implementation requirements in CNSSI 1253, NIST SP 800-53, and the Joint Special Access Program Implementation Guide.
  • Ability to perform vulnerability assessments using ACAS, DISA STIGs, and SCAP Compliance Checker with automated benchmarks.
  • Experience implementing operating-system and network-device security configurations in accordance with DISA-approved STIGs.
  • Experience performing continuous monitoring, security audits, risk analysis, and mitigation-strategy development for DoD information systems.
  • Experience identifying Common Criteria- and NIAP-certified technologies and products on the DISA Approved Products List.

About the Company

ASEC

Defense engineering, IT, training, and logistics

ASEC provides engineering, IT, training, and logistics services for the defense sector, focusing on mission success for the Warfighter, including design and maintenance of systems for manned and unmanned aircraft. It combines engineering design and maintenance with logistics support, custom Navy training, and hands-on instruction, plus test and evaluation, IT security, and flight operations to support Navy aircraft programs. It stands out because it is 100% employee-owned and offers an integrated suite of capabilities across multiple sites tailored to defense aviation needs. Its goal is to help the Warfighter achieve mission success by delivering precise, cost-effective solutions that ensure reliability and readiness of advanced Navy aircraft.

Company size
501-1,000
Company stage
Grant
Total funding
$2.3M
Headquarters
Maryland, United States
Founded
2004

Recently Posted Jobs

Explore more opportunities at ASEC

See more jobs