Centurion is currently seeking a Sr. Security Specialist (Information System Security Officer) to join their team.
Day-to-day Responsibilities:
Individual will be interacting with key Subject Matter Experts (SME) and Government Stakeholders while assisting other junior ISSOs.
- Manage and support the creation, monitoring, and updating the status of POA&Ms to ensure weaknesses are resolved in accordance to their scheduled completion dates.
- Support the creation of Waivers or Risk Acceptance Memos to assist in the effective management of system risks.
- Manage and support the review, creation and update security authorization documents as needed, but at least annually in the government’s A&A tools.
- Support Contingency Plan tests at least annually and updating the plan.
- Support system self-assessments as part of an Ongoing Authorization program.
- Monitor and respond to Information Security Vulnerability Management (ISVM)/Patch Management. • Maintain and manage the knowledge of inventory in accreditation boundary.
- Support the planning of Assessment and Authorization their assigned information system or information systems.
- Ensure Configuration Management processes are followed to ensure that any changes do not introduce new security risks and attend to the Change Control Boards.
- Respond to current and emerging requirements.
- Participate in DevOps Sec (security integrated into Agile processes) requirements for assigned systems.
- Manage and assist in duties articulated in the ISSO checklist (i.e. classified spill cleanup, Audit log review, Maintaining Privilege User and Physical access lists etc.).
- Strong experience in the RMF process.
- Ad hoc duties assigned by ISSM.
Expected Deliverables: ATO documentation for systems going through the authorization process.
Education: A Bachelor’s degree from an accredited university in a field such as information systems, computer science, engineering, Management Information’s systems or a related technical field.