Information System Security Officer (ISSO)

Who we are

ShorePoint is a fast-growing, industry recognized, and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion, and a focus on giving back to our community.

The Perks

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement, etc.

Who we’re looking for:

We are seeking an Information System Security Officer who has experience providing support in a dynamic, fast-paced environment within the public sector. This is a unique opportunity to shape the growth, development, and culture of an exciting and fast-growing company in the cybersecurity market. The Information System Security Officer who will have the opportunity to be exposed to all aspects of support to a federal client and will be encouraged to grow as the organization expands.

What you’ll be doing:

Performs security assessments for systems to ensure compliance with policies, controls and standards of the agencyCollaborate with System Owner(s) to be an advisor for the system(s) information assuranceManage and find efficiencies to improve A&A processes.Review vulnerability reports and provide assessmentsOversee the process from categorization through Continuous monitoring and able to ask questions to author or coordinate development to populate security authorization package including but not limited to: FIPS 199, System Security Plan (SSP), security assessment reports, review of vulnerability reports and provide assessments, Plan of Action & Milestones (POA&M) management, Security Impact Analysis (SIA), Continuous Monitoring and formulation of Contingency Plans as needed.

What you need to know

Ability to create and own Security Artifacts such as System Security Plans and Security Assessment ReportsExperience providing guidance and support to development of Plan of Action and Milestone (POA&M). Create and develop ATO Packages for technology offeringsAbility to propose and ensure systems are complaint within the proper Security policies (NIST 800, FedRAMP, FISMA, RMF etc.)Experience with reviewing/interpreting Network and Application Vulnerability and compliance scans.

Must have’s:

Minimum of 3 years of relevant experienceBS in Computer Science, Information Systems or related discipline from an accredited college or university; or Associate’s degree plus additional two years’ of experienceAbility to obtain federal agency required clearance

Where it’s done:

Herndon, VA or Remote