Information System Security Officer (ISSO)
Overview:
Brandes Associates Inc. is seeking Information System Security Officers (ISSO) with 3+ years of experience and DevSecOps Automation and Continuous Integration Continuous Delivery (CI/CD) experience to work Department of Defense (DoD) programs at the Naval Base Point Mugu located near Camarillo, CA.Opportunities for career advancement, excellent benefits, and stability are some of the advantages of our well established, employee-focused company.
Salary
The typical annual salary range for this position is $100,000.00 USD to $135,000.00 USD. Salary will be based on current qualifications, directly related experience, geographic location, and possible contractual requirements which could fall outside of this range.
Responsibilities:
Information Assurance- Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information
- Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
- May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
- May respond to computer security breaches and viruses
- Work with ISSO and Cybersecurity Lead to respond to computer security breaches and viruses
- Integrate security into a continuous integration, continuous delivery, and continuous deployment pipeline to minimize vulnerabilities in software code
- Ensure the entire DevOps team, including developers and operations teams, share responsibility for following security best practices
- Enable automated security checks at each stage of software delivery by integrating security controls, tools, and processes into the DevOps workflow
- Assist in the continuous integration, continuous delivery/deployment (CI/CD), continuous feedback, and continuous operations cycle
Qualifications:
- Between 3 and 10 years of practical CEAT computer security experience in secure network and system design, analysis, procedure/test generation, test execution and implementation of computer/network security mechanisms
- Security+
- CISSP Certification or NSA equivalent
- IAM Level 2 as per DoD Directive 8570.01; and experience working with the Risk Management Framework processes.
- Strong DEVSECOPS and Linux background is a plus
- Excellent communication and interpersonal skills—verbal, non-verbal, written, and listening—for staff, customer, and organizational level communications, both formal and informal
- Ability to work independently, self-starter
- Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint
Education:
BS or BA degree in a Computer or Information Science field or a relevant technical discipline.
ALLOWABLE SUBSTITUTION: An additional 6 years of relevant work experience may be substituted for a Bachelor’s Degree, or 4 additional years of work experience with a relevant Associate’s Degree.
Clearance:
Condition of employment – must have a T5/Secret Security Clearance and be able to acquire and maintain a DoD Top Secret Security Clearance. Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.
Citizenship:
Must be a US citizen at time of application.