Information System Security Officer

Radiance Technologies is an employee-owned company with benefits that are unmatched by most companies in the Dayton OH area. Employee ownership, generous 401K, full health/dental/life/vision insurance benefits, interesting assignments, educational reimbursement, competitive salaries, and a pleasant work environment combine to make Radiance Technologies a great place to work and succeed.

Position Summary:

Job Duties and Responsibilities include but are not limited to:

-

Apply knowledge of information security services analysis concepts, practices and procedures and executes security procedures for classified computer systems

-

Work in conjunction with a multi-contractor team in support of Cybersecurity, continuous monitoring, and other emerging compliance requirements

-

Identify, manage, verify, and implement Cybersecurity requirements and Cybersecurity controls, in the same manner as all other system requirements, ensuring traceability

-

Work with other contractors, government personnel, and the Security Control Accessor

-

Representative (SCAR) team to establish, and maintain ABSS’s security posture in accordance with applicable statutory, regulatory, and STIG guidance

-

Support all efforts necessary to obtain and maintain ABSS’s Authorization to Operate (ATO)

-

Develop any necessary artifacts and test plans required to obtain and maintain the ATO

-

Store and maintain artifacts in eMASS

-

Implement, test, and continuously monitor cybersecurity controls

-

Advise the ABSS PMO on security compliance issues impacting system operations

-

Develop Plan of Action and Milestones (POA&M) to resolve, mitigate, and track vulnerabilities

-

May assist in the development and implementation of policies and operating procedures

-

May assist in conducting periodic self-inspections on local processes and practices

-

Identifies and documents unique local threats and vulnerabilities to classified information systems security

-

Ensure periodic self-assessments of the facility’s classified information systems are conducted as part of the overall facility self-inspection program and that all corrective actions are taken

-

Assist with investigations into security violations related to cleared information systems; ensures corrective actions are implemented

-

Monitors and enforces access requirements to cleared information systems in support of classified contracts

-

Additional tasks as required

Required Skills:

-

Bachelor's degree in IT Systems, Engineering, or other technical field preferred, plus 3 - 5 years of related experience, or equivalent combination of education and experience.

-

Active TS/SCI Clearance

-

3+ years of security experience in either the defense industry or Information Systems Security, or a combination of both

-

Knowledge of information systems security components and best practices including; firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices

-

Practical experience with the full Software Development Life Cycle (SDLC) and associated methodologies (e.g. Waterfall, Agile, etc.)

-

Contract Data Requirements List (CDRL) experience

-

Excellent written and oral communications skills

-

Strong interpersonal oral, written and communication skills

-

U.S. Citizen able to obtain NACI/T1

-

Ability to achieve IAM Level I Certification at a minimum (CAP, GSLC, Security+CE ) within 90 days

Desired Skills:

-

Department of Defense (DoD) courses related to government security

-

Knowledge of U.S. Government Information System security standards (i.e. NIST and ISO27)

-

Knowledge of the Risk Management Framework

-

Experience with Security Directives, Policies, Publications and Regulations including but not limited to the NIST 800-171, NIST 800-53, JSIG and/or ICD 503

-

Some knowledge on how Solaris/Unix and Oracle database management systems are configured, hardened, and managed

-

IAM Level I Certification (CAP, GSLC, Security+CE )