**This position is contingent upon award of contract**

SOSi is seeking to hire a highly qualified Information Systems Security Officer/Project Management to serve as the Government’s trusted security advisor to individual offices and to provide Project Management / overall leadership and guidance for all contractor personnel assigned to the contract.

• Document each system’s System Security Plan (SSP).


• Perform as the trusted security advisor to the System Owner.


• Manage remediation and mitigation efforts for the systems they are responsible for.


• Enter data into the system of record’s compliance /assessment tool for each system.


• Manage System Security Plans (SSPs) for each system using the customer tool of record.


• Coordinate system security documentation for each system.


• Support the customer office by responding to inquiries from higher headquarters, as well as communicating with higher headquarters on security concerns that the office has.


• Ensure vulnerability scanning is performed and follow up on identified vulnerabilities.


• Perform periodic activities enabling continuous monitoring.


• Supervise 4-8 personnel, provide monthly contractual reports to the government, and interact with government personnel.

• 3 years of experience as an ISSO, preferably for the federal government.


• 5 years collaborating and reviewing System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessment Methods (RAMs), Risk Management Processes (RMPs), Cybersecurity Compliance Certifications (CCCs), Scorecards, and related documents with ISOs and other applicable stakeholders.


• 3 years of experience with Risk Management Framework (RMF), NIST, FISMA compliance.


• 5 years of experience in Tenable Nessus, CyberArk, Application Security testing suites, penetration testing tools, Security Information and Event Management (preferably Splunk), one or more Configuration Management Database (e.g. BMC and/or ServiceNow), API automation, and Identity Management systems (e.g., TACACS, AD, Tivoli, OAuth).


• 3 years of experience with cloud security, including active directory federation services.


• 3 years of experience with the CSAM (Cyber Security Assessment and Management) software tool (i.e., specifically the software from the DOJ).


• Ability to attain Public Trust Suitability Determination.

• Bachelor's degree

• Remote