Information System Security Officer

Position Description
ERT is seeking an Information System Security Officer (ISSO) to support work at the NOAA National Environmental Satellite Data and Information Service (NESDIS) Office of Satellite and Product Operations (OSPO). This position will serve as the Alternate ISSO to the Federal ISSO, providing management and oversight of daily security operations, and principal IT security advisor to the System Owner.

Requirements
A minimum of 6 years of experience

• CISSP certification required; CGRC, or CEH certifications preferred.
• Experience in implementation and monitoring of information system compliance with Federal, NIST, Department of Commerce (DOC), NOAA, NESDIS, or OSPO (Office of Satellite and Product Operations) information security control policies and procedures, ensuring industry and/or U.S. Federal government best practices are followed.
• Experience in the development, management, and maintenance of the entire core documents package (including, but not limited to the System Security Plan (SSP), FIPS 199, FIPS 200, and Contingency Plan). 
• Ability to lead successful collaboration between system administrators and independent assessors in order to generate quality artifacts during annual security controls assessments.
• Maintenance of the security authorization package in the Cyber Security Assessment and Management (CSAM) system.
  Conducting Security Impact Analysis (SIA).
• Coordination with network and system support personnel to ensure software, firmware, and security updates are applied to components within deadlines.
• Planning, management, and execution of weekly, monthly and quarterly vulnerability scans.
• Analysis of monthly and vulnerability scan results, Security Controls Assessment (SCA) results, and penetration test results and corresponding remediation plans.
• Development, management, and maintenance of POA&Ms in CSAM.
• Planning, execution, and documentation of continuous monitoring activities.
• Planning, coordination, management, and oversight of implementation NOAA/NESDIS/OSPO standard technologies such as ArcSight, BigFix, Axonius, and Tenable Security Center. 
• Expertise in cloud (AWS) security tools highly preferred
• Must be a US Citizen or Permanent Resident who has lived in the United States at least 3 out of the last 5 years and be able to pass a background investigation to obtain a security badge to access applicable government facilities and systems.

Education
B.S. in Engineering or related technical field, or equivalent combination of education and experience.

Location
The position is located on-site at NOAA's Satellite Operations Facility in Suitland, MD. Telework permitted when not required to be on site.

Compensation
The salary range for this role is $66, ,000/year. This range is a good faith estimate based on similar roles across the organization. ERT considers several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate's work experience, education/training, and key skills.

Benefits
All full-time employees are eligible to participate in our flexible benefits package, which includes:

• Medical, Rx, Dental, and Vision Insurance
• 401(k) retirement plan with company-matching
• 11 Paid Federal Government Holidays
• Paid Time Off (PTO)
• Basic Life & Supplemental Life
• Health Savings