IA – Information Systems Security Officer

Overview

RCG is a growing federal contracting company and Certified as a Great Place to Work. We are currently seeking an Information Assurance – Information Systems Security Officer to support our government client site in Suitland, MD. Individuals will work a hybrid schedule of three (3) days on-site and two (2) telework days.

Due to security requirements, all successful candidates will be a U.S. Citizen or Lawful Permanent Resident and be able to successfully pass the required background check. Must be eligible to obtain a Secret clearance (Preference is to hold a current and active Secret clearance).

The IA Eng/ISSOs provide SME support to client systems development projects and are responsible for advising teams on security best practices, regulations, and requirements in a cloud based environment. IA Eng/ISSOs assist project teams in maintaining an appropriate security posture and attaining appropriate security authorizations and approvals. The team member will:

• Review proposed new systems, networks, and software for potential security risks and security-related product selection and implementation activities
• Define the applicable system scope and level of detail for security plans
• Manage Change Requests (CR), identifying and validating change needs, based on new security technology and evolving threats
• Analyze CRs to the system for security posture impact/updates
• Provide Security Assessment & Authorization (SA&A) support for new and existing systems
• Identify & generate Security Artifacts for SA&A
• Review and recommend approval of systems FIPS 199, FIPS 200, and E-Authentication, prepare and provide System Security Plans (SSP)
• Coordinate Security Test and Evaluation (ST&E) events between involved stakeholders and participate in ST&E process and review ST&E report
• Perform Vulnerability Assessment review and generate reports for System Owner (SO) and stakeholders
• Assess known systems vulnerabilities and verify system hardening and patching activities, ensuring compliance with applicable Security Requirements and related checklists
• Report to Program Manager / Deputy Program Manager

• Must be eligible to obtain a Secret clearance
• U.S. Citizen or Lawful Permanent Resident and be able to successfully pass the required background check
• Bachelor’s degree in a technical field such as Engineering or 10 years of experience in IT Systems Engineering or IT security architecture
• 6+ years of hands-on experience
• Strong expertise in cloud architecture, cloud engineering, and cloud compliance experience
• ISSO experience, supporting FISMA Systems
• Ability to work in a hybrid work environment including both on-site and telework
• Excellent interpersonal skills and demonstrated ability to work well in a team environment, and collaborate with various people and organizations
• Excellent communication skills – both verbal and written in the English language

• Must hold CISSP or equivalent certification
• Must hold Amazon Web Services (AWS) Cloud Practitioner or Essential course and Certificate of Cloud Knowledge (CCAK) Plus or Certified Cloud Security Professional (CCSP) for ISSO/Compliance

• Current and active Secret clearance

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

EEO Statement: RCG, Inc. does not discriminate against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, sexual orientation/gender identity, or national origin.