Information Systems Security Officer (TS/SCI + Poly)

Description

The DarkStar Group is seeking an Information Systems Security Officer with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Dulles, VA. Below is an overview of the project, as well as information on our company, our benefits, and our $25,000 referral program.

THE PROGRAM

The DarkStar Group is a member of 100% of the winning teams for the largest technology program in the Intel Community. We've been supporting this customer on many different sub-projects of this program since our founding in 2013. We've grown on this effort by providing the customer with Engineers who have done exceptional work, and we've retained our staff by paying very strong salaries, and working hard to ensure each Engineer is doing work that aligns with their career interest.

The Role

• The Information System Security Officer {ISSO) is responsible for work with system owners and project managers to facilitate and provide guidance on achieving Approval to Operate (ATO) through the customer's formal Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process. The selected candidate will need to apply technical experience to understand details of complex technical network design and deployment methodologies. The selected candidate will assist in providing cybersecurity and data protections policy interpretation and guidance to a small team of mission focused network and systems engineers as well as with other non-technical partners across the organization. The ability to solicit and interpret needed information for engineers is key.

Duties:

• Understand and determine requirements for approvals.
• Understand and determine requirements for Accreditation and Authorization process
• Familiarity with customer risk management framework and enterprise accreditation tools.
• Work with ISSM staff for policy guidance with the ultimate goal of approval to operate while protecting the systems from disclosure.
• Work with ISSM determine the appropriate amount of information that can be stored in mandatory enterprise systems consistent with program guidelines.
• Create, Coordinate, and Submit all required artifacts for accreditation
• Engage with on-site engineers and off-site vendors to advise and document security designs
• Work with teams to ensure adequate INFOSEC considerations are introduced
• Identify deficiencies in INFOSEC considerations in existing systems and work to document, mitigate, or accept the risk of identified issues
• Advise team of critical security vulnerabilities and system patches when released by vendors
• Track deployment of security patching on systems
• Ensure system scanning is completed and when possible compliant with customer policies
• Track, triage, and address system POA&Ms
• Keep up to date on critical vulnerabilities in customer platforms and translate them into patching requirements for system engineers.
• Demonstrate the following:
  • Ability to manage/prioritize multiple project requirements and work in a team environment or independently with good judgment and personal initiative.
  • Ability to deliver comprehensive briefings that convey complex concepts and/or technical information regarding information security issues clearly and concisely to both technical and non-technical audiences.
• Maintain appropriate technical training to ensure skills are kept current with evolving technology
• Performs other duties as assigned at the direction of Project Management

Required Skills

• Willingness to travel around WMA for meetings and 1 to 2 CONUS trips per year
• Experience reviewing, approving and/or developing security plans for IT projects and developing security measures to safeguard information against accidental or unauthorized modification, destruction or disclosure
• Demonstrated understanding of information systems, system development, network architecture and cyber security, including information security protocols and software
• Ability to communicate the customer's information security policies vision, goals and objectives; encouraging open and honest communication
• Demonstrated understanding ofthe customer's accreditation tools
• Experience with the customer's Assessment and Authorization process
• Experience working with customer's ISSM staff

Desired Skills (Optional)

• Experience with customer's specialized networks
• Experience in procurement and setting up of specialized communication solutions
• Cyber security certifications such as Certified Information System Security Professional (CISSP), Security+ or similar

About The DarkStar Group

Our Company

The DarkStar Group is a small business that solves BIG problems. We're one of the Inc. 5000 fastest-growing private companies in the US, and our engineers and scientists support the most critical national security missions in Virginia, Maryland, and elsewhere. Data Science, Software Engineering, Cloud/AWS Infrastructure, and Cyber/CNO are our core areas of expertise. We offer interesting and important work, job security, some of the best and most flexible benefits you'll find in the IC, and salaries so strong that they'll likely surprise you.

Our Benefits

The DarkStar Group offers exceptional compensation and benefits:

• very strong salaries;
• 100% company-paid medical, dental, and vision premiums for you and all dependents;
• the ability to get increased salary if you don't need medical/dental/vision;
• 100% company-paid disability and life insurance benefits;
• a generously-funded HSA;
• an 8% 401(k) contribution;
• 31 days of PTO/holidays to start (more with tenure);
• the ability to flex time across pay periods without using your PTO;
• a generous training budget;
• $25,000 employee referral bonuses;
• business development / growth incentives; and
• top notch company swag.

** We have a huge growth opportunity, so we are offering up to a $25,000 reward for anyone new you refer whom we hire. **

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.