Information System Security Officer

Radiance Technologies is an employee-owned company with benefits that are unmatched by most companies in the Dayton OH area. Employee ownership, generous 401K, full health/dental/life/vision insurance benefits, interesting assignments, educational reimbursement, competitive salaries, and a pleasant work environment combine to make Radiance Technologies a great place to work and succeed.

Position Summary:

Job Duties and Responsibilities include but are not limited to:

• Apply knowledge of information security services analysis concepts, practices and procedures and executes security procedures for classified computer systems

• Work in conjunction with a multi-contractor team in support of Cybersecurity, continuous monitoring, and other emerging compliance requirements

• Identify, manage, verify, and implement Cybersecurity requirements and Cybersecurity controls, in the same manner as all other system requirements, ensuring traceability

• Work with other contractors, government personnel, and the Security Control Accessor

• Representative (SCAR) team to establish, and maintain ABSS’s security posture in accordance with applicable statutory, regulatory, and STIG guidance

• Support all efforts necessary to obtain and maintain ABSS’s Authorization to Operate (ATO)

• Develop any necessary artifacts and test plans required to obtain and maintain the ATO

• Store and maintain artifacts in eMASS

• Implement, test, and continuously monitor cybersecurity controls

• Advise the ABSS PMO on security compliance issues impacting system operations

• Develop Plan of Action and Milestones (POA&M) to resolve, mitigate, and track vulnerabilities

• May assist in the development and implementation of policies and operating procedures

• May assist in conducting periodic self-inspections on local processes and practices

• Identifies and documents unique local threats and vulnerabilities to classified information systems security

• Ensure periodic self-assessments of the facility’s classified information systems are conducted as part of the overall facility self-inspection program and that all corrective actions are taken

• Assist with investigations into security violations related to cleared information systems; ensures corrective actions are implemented

• Monitors and enforces access requirements to cleared information systems in support of classified contracts

• Additional tasks as required

Required Skills:

• Bachelor's degree in IT Systems, Engineering, or other technical field preferred, plus 3 - 5 years of related experience, or equivalent combination of education and experience.

• Active TS/SCI Clearance

• 3+ years of security experience in either the defense industry or Information Systems Security, or a combination of both

• Knowledge of information systems security components and best practices including; firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices

• Practical experience with the full Software Development Life Cycle (SDLC) and associated methodologies (e.g. Waterfall, Agile, etc.)

• Contract Data Requirements List (CDRL) experience

• Excellent written and oral communications skills

• Strong interpersonal oral, written and communication skills

• U.S. Citizen able to obtain NACI/T1

• Ability to achieve IAM Level I Certification at a minimum (CAP, GSLC, Security+CE) within 90 days

Desired Skills:

• Department of Defense (DoD) courses related to government security

• Knowledge of U.S. Government Information System security standards (i.e. NIST and ISO27)

• Knowledge of the Risk Management Framework

• Experience with Security Directives, Policies, Publications and Regulations including but not limited to the NIST 800-171, NIST 800-53, JSIG and/or ICD 503

• Some knowledge on how Solaris/Unix and Oracle database management systems are configured, hardened, and managed

• IAM Level I Certification (CAP, GSLC, Security+CE)