ISSO/ISSM SME

ASRC Federal is seeking experienced Information System Security Officer (ISSO) SMEs with experience assessing Federal agency compliance with the DHS CISA Zero Trust Maturity Framework in support of a new government program. This program will support and augment ongoing efforts to achieve, maintain, continuously improve, and integrate ZT operational capabilities and solutions across ZT pillars. The purpose of this program is to provide enhanced capabilities and integration of operational capabilities and services across ZT pillars to accelerate ZT maturity beyond its current rate, and achieve and maintain White House, OMB, and DHS ZT maturity goals over the next two years.   

ISSO/ISSM SMEs will support the security activities associated with evaluating, assessing, implementing, and managing security practices and continued operations of new and existing technologies for assigned systems in a Zero Trust environment. ISSO SMEs shall perform all duties and responsibilities in accordance with NIST SP 800-37, Risk Management Framework for Information Systems and Organizations, DHS 4300A, Zero Trust Framework, FISMA and other applicable guidance. This position is REMOTE. 

Responsibilities:  

• Prepare documentation to support the operations of FedRAMP requirements. 
• Develop briefings and presentations for Government PM and Executive Management. 
• Provide security recommendations. 
• Support Security Authorization Processes, Security Control Assessments, and Ongoing Authorization activities as required and as directed by the customer. 
• Provide technical security solutions and control implementation recommendations to the development teams based on industry best practice and Federal requirements. 
• Perform comprehensive document reviews (DR) on risk management and security operations documentation, in alignment with DHS, USCIS, Zero Trust and FISMA requirements. 
• Perform independent reviews of system self-assessments of Zero Trust maturity  

Desired Skills and Qualifications: 

• Security experience with systems in the cloud; specifically, AWS, Google, or Azure. 
• Experience with CI/CD - Deployment pipeline (e.g., Jenkins, Ansible). 
• Ability to provide security recommendations during the change management process. 
• Knowledge of Twistlock, Nessus, and Burp Suite vulnerability scanners. 
• Ability to function as a technical and security expert across multiple project/task areas. 
• Ability to work on high priority, ad hoc requests such as data calls, Senior Management(CIO, CISO, etc.)Initiatives, and customer mandates. 
• Deep understanding of Zero Trust and Security Regulations, such as NIST Publications and OMB Memoranda. 

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity /Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.