Spcl, Info Security

The Information Security and Compliance Office (ISCO) is a part of the Enterprise Information Technology (EIT) Directorate within Leidos Biomed. The ISCO provides IT security auditing, engineering, and incident response support for the Frederick National Laboratory for Cancer Research (FNLCR) and the National Cancer Institute - Frederick. The mission of the Information Systems Program is to develop an enterprise-level, consolidated information technology infrastructure that provides exceptional IT capabilities to the Frederick National Labs for Cancer Research (NCI-Frederick/FNLCR) in support of basic, translational, and clinical cancer and AIDS research. ISCO supports the life cycle of information security for the scientific mission and administrative functions of the NCI-Frederick/FNLCR, to ensure the availability of information systems, protect the integrity of information, and protect the confidentiality of intellectual property and patient data.

KEY ROLES/RESPONSIBILITIES

• Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems
• Researches attempted or successful efforts to compromise systems security and designs countermeasures
• Maintains hardware, software and network firewalls and encryption protocols
• Administers security policies to control physical and virtual access to systems
• Corelate and analyze data from numerous sources to identify threats
• Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems
• Performing and analyzing system and application scans
• Serve as point of contact for organization wide vulnerability remediation efforts
• Assist with configuring, operation, documentation, monitoring, and engineering of information security tools.
• Monitoring NCI-Frederick/FNLCR information systems and environments of operations, including incident response, vulnerability management and change control
• Serving as an advisor on matters involving the security of NCI- Frederick/FNLCR information systems
• Tracking status of open plan of action and milestones (POA&M) items associated with NCI-Frederick/FNLCR information systems and notifying system owners of upcoming milestones

BASIC QUALIFICATIONS

• Possession of an BA/BS degree from an accredited college/university according to the Council for Higher Education Accreditation (CHEA) in a related field (Additional qualifying experience may be substituted for the required education). Foreign degrees must be evaluated for U.S. equivalency.
• In addition to the education requirements, a minimum of six (6) years progressively responsible job related experience. Experience must include functioning as an analyst or equivalent for information security, information systems, or related.
• Work independently and make decisions regarding complex issues with appropriate consultation of peers, cross-functional teams, and supervisors
• Must be analytical and able to analyze complex information, synthesize disparate data sources, and communicate effectively
• Must be able to develop technical documentation and non-technical presentations; and, express information in a clear, concise, and organized manner, both verbally and in writing
• Must be detail-oriented with the ability to prioritize multiple tasks/projects
  Must be able to obtain and maintain a clearance

PREFERRED QUALIFICATIONS

• Familiarity with Windows, Linux and Mac systems in a scientific and/or federal environment
  Working knowledge of application security concepts and techniques
• Hands on experience with administering Splunk

Expected Competencies:

• Working knowledge of current and emerging security technologies such as intrusion detection systems (IDS), security information and event management (SIEM) applications, and related security tools
• Demonstrate working knowledge of standards and guidelines for Information Security published by the National Institute of Standards and Technology (NIST)
• Working knowledge and expertise required for administering the information security aspects of information systems in compliance with regulations and directives of FISMA, and the Office of Management and Budget (OMB)
• Experience as an incident responder/handler
• Working knowledge of system and application scanning tools

Equal Opportunity Employer (EOE) | Minority/Female/Disabled/Veteran (M/F/D/V) | Drug Free Workplace (DFW)​​