Senior Information Systems Security Officer, NGC2
Core
Hands-on security practitioner responsible for day-to-day compliance execution and vulnerability management across a cloud-native platform for a large-scale Army Command & Control program.
Role type
Senior Information Systems Security Officer (ISSO)
Builds
Cloud-native platform supporting global command and control missions
Domain
Defense / Cybersecurity / Cloud Infrastructure
Required skills
CVE remediation, vendor security artifact review, STIG compliance validation, RBAC management, security event monitoring, RMF support, change request security review
Preferred skills
Container security scanning (Trivy, Grype), cloud PaaS security (IL2-IL6), eMASS management, Cross-Domain Solutions familiarity
Technologies
Kubernetes, eMASS, SCAP, Evaluate-STIG, DISA STIGs, SAST, DAST, SBOM, POA&Ms
Responsibilities
Track and coordinate CVE remediation across program environments; Review third-party vendor onboarding security packages; Validate STIG compliance using SCAP and DISA STIGs; Manage and audit user access controls via RBAC; Monitor security events and investigate anomalies; Maintain security artifacts in eMASS; Review platform Change Requests for security impact; Support RMF activities including ATO package preparation.
Seniority
Senior, hands-on IC