Req ID: 293940
NTT DATA Services strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Senior Cloud ISSO - Hybrid to join our team in Arlington, Virginia (US-VA), United States (US).
The Information System Security Officer (ISSO) will serve primarily on the Cybersecurity Service Security Team. This role ensures the appropriate operational security posture is maintained for information system or program. The ISSO also serves as the principal advisor to the Authorizing Official and information System Owner on all matters involving the security of the information system.
Job Duties:
Evaluation of the assigned information systems’ security control compliance with the federal requirements and the client’s monitoring strategy. Management of emerging and defined risks associated with the administration and use of assigned information systems. Coordination with the client’s Cybersecurity Unit to achieve and maintain the information systems’ compliance and authorization to operate (ATO). Ensuring systems are operated, maintained, and disposed of in accordance with policies outlined in the approved security authorization package. Performing annual assessments to ensure compliance with the client’s policies and standards. Serve as a member of the Configuration Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented. Ensuring information system security requirement are addressed during all phases of information systems lifecycle. Establishing audit trails, ensuring their review, and making them available while retaining audit logs in accordance with DOJ and component policies. Generate and interpret documentation needed to address the items detailed within the CSAM. Work within a team environment to provide technically sound guidance in order to adhere to the cybersecurity industry best practices and the client’s monitoring strategy. Analyze collected information to identify vulnerabilities and potential for exploitation and effectively present the results and guidance derived from scans to system owners or other leadership, as required. Effectively communicate orally and in writing to track and detail the demands, efforts, and shortcomings in meeting the goals of the client’s information system monitoring strategy. Support the integration/testing, operations, and maintenance of systems security. Develops, updates, and maintains internal Standard Operating Procedures for all internal assigned functions. Aligns business processes and information technology strategy with the conditions and circumstances of the functional environment and establishes effective performance measures. Contributes to the definition and implementation of planning processes and/or systems at the enterprise level including both strategic and operational activities. Provides system operation support, administers hardware and software inventory.
Basic Qualifications:
MS/MA in Information Technology Management, Business, or task order specific discipline. Education Equivalency: High School Diploma + 4 additional years of experience = Associate's Degree; Associate's Degree + 4 additional years of experience = Bachelor's Degree; Bachelor's Degree + 4 additional years of experience = Master's Degree Minimum 10 years of experience as ISSO, security analyst, or security engineer. Minimum 10 years of experience with program security responsibilities to include, but not limited to the NIST RMF, audit log reviews, system monitoring, SPAA processes, FISMA requirements, vulnerability & compliance scanning, continuous monitoring activities, security testing and evaluation, and security policies. Minimum 10 years of security engineering experience to include: SPLUNK, tools (CORE, SOAR, ES, UBA), SIEM, Azure Cloud, AWS cloud, Kubernetes, Docker, Rancher, Linux, or windows command line experience. Minimum 10 years of experience with cloud tools to include: Security hub, Inspector, Lambda, EC2, Cloud Formation, RMF experience, or Code review for vulnerabilities. Minimum 8 years of experience performing any combination of Information SPAA, risk assessments, cybersecurity, system administration, or engineering. Minimum 3 years Fed Ramp Experience Minimum 3 years of DevSecOps experience Secret clearance: must be eligible for a Top-Secret clearance, if requested.
Preferred Qualifications:
AWS Certified SysOps Administrator. AWS Certified Solutions Architect – Associate. AWS Certified Developer – Associate. CompTIA Cloud+ Certified Cloud Security Professional (CCSP) AWS Certified Solutions Architect – Professional Certificate of Cloud Security Knowledge (CCSK)
#FEDSEC
About NTT DATA Services
NTT DATA Services is a recognized leader in IT and business services, including cloud, data and applications, headquartered in Texas. As part of NTT DATA, a $30 billion trusted global innovator with a combined global reach of over 80 countries, we help clients transform through business and technology consulting, industry and digital solutions, applications development and management, managed edge-to-cloud infrastructure services, BPO, systems integration and global data centers. We are committed to our clients’ long-term success. Visit nttdata.com or LinkedIn to learn more.
NTT DATA Services is an equal opportunity employer and considers all applicants without regarding to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees. If you need assistance or an accommodation due to a disability, please inform your recruiter so that we may connect you with the appropriate team.