Dev Technology Group is hiring a
Senior Information Systems Security Officer

Summary

The job description is for a Senior Information Security Specialist position at Dev Technology Group. The role involves coordinating IT security regulations, ensuring compliance, preparing and updating security documentation, identifying and addressing weaknesses, conducting interviews and table-top exercises, advising on processes that align to the Risk Management Framework, conducting annual Contingency Plan Testing, developing and implementing security controls based on FISMA and NIST 800-53 guidelines, coordinating with IT leads from partner agencies/components, reporting IT security incidents in accordance with established procedures, providing development teams with weekly security reports, developing and implementing Authority to Operate, conducting IT audits and information systems and network connections security, providing security guidance to and interpreting security policy for project development teams. The required education is a Bachelor's degree, at least 7 years of experience securing government IT systems, strong working knowledge of the Risk Management Framework, experience providing security guidance to systems deployed in AWS, ability to work in a collaborative environment as well as manage individual tasks, and outstanding communications skills. Preferred skills include experience working on ISAs, PKI, Security plans, audits, one security certification (Security +, CISSP, Global Information Assurance Certifications (GIAC) Security Leadership or Certified Information Security Manager (CISM)). The estimated salary range is $108,000-$155,000.

Requirements

• Bachelors Degree required
• At least 7 years of experience securing government IT systems
• Strong working knowledge of the Risk Management Framework
• Experience providing security guidance to systems deployed in AWS
• Ability to work in a collaborative environment as well as manage individual tasks
• Demonstrates understanding of technical components of an information system environment
• Outstanding communications skills---both written and oral

Responsibilities

• Coordinates information technology security regulations and requirements
• Ensures compliance to all policies and best practices
• Prepares all security documentation and ensures it is updated and maintained
• Ensures weaknesses, vulnerabilities and findings are identified and addressed appropriately
• Prepares POA&Ms, waivers and/or accepted risk process as necessary
• Ensures implementation of security measures by conducting interviews and table-top exercises
• Advises on processes that align to the Risk Management Framework
• Conducts annual Contingency Plan Testing
• Develops and implements security controls based on FISMA and NIST 800-53 guidelines
• Coordinates with IT leads from partner agencies/components to identify opportunities to collaborate in the development and/or leveraging of IT capabilities
• Reporting IT security incidents in accordance with established procedures
• Provides development teams with weekly security reports
• Develops and implements Authority to Operate
• Conducts IT audits and information systems and network connections security
• Provides security guidance to and interprets security policy for project development teams

Preferred Qualifications

• Experience working on ISAs, PKI, Security plans, audits
• One security certification (Security +, CISSP, Global Information Assurance Certifications (GIAC) Security Leadership or Certified Information Security Manager (CISM) preferred

Benefits

• Generous and flexible time-off policy
• Flexible work schedules and telework options, including remote work availability for eligible projects
• Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities
• Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more
• 401K matching with immediate vesting and end of year profit sharing
• Regular team and company social events including our annual party, happy hours, fitness challenges, and more
• A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts