​Senior Information Systems Security Officer

Position Summary

Joining the KSAT Team means

Compensation

• The On-Target base salary range is $135K-$165K annually.

Benefits Package Highlights

• Four weeks of PTO annually
• $0 individual medical insurance with generous coverages
• Flexible working environment
• Fitness expense reimbursement program
• Tuition reimbursement program
• International travel opportunities

Essential Job Duties and Responsibilities

• Serve as the designated Information Systems Security Officer (ISSO) for KSAT's U.S.-based information systems and regulated environments.
• Lead implementation, assessment, and continuous monitoring of NIST 800-53 security controls.
• Maintain the cybersecurity posture of systems supporting government, defense, and commercial space customers.
• Develop, maintain, and continuously improve system security policies, procedures, standards, and operational guidance.
• Act as the primary interface for cybersecurity audits, assessments, inspections, and customer security reviews.
• Support development and maintenance of System Security Plans (SSPs), POA&Ms, security assessments, policies, and other compliance documentation.
• Lead cybersecurity activities associated with system authorization and Authority to Operate (ATO) processes.
• Track and manage cybersecurity risks, vulnerabilities, findings, and remediation efforts.
• Coordinate cybersecurity monitoring activities across cloud and on-premises environments.
• Review security events, alerts, vulnerabilities, and threat intelligence reporting to identify potential impacts to KSAT systems.
• Collaborate with software, cloud, and network engineering teams to implement secure architectures and operational processes.
• Serve as the primary cybersecurity advisor to KSAT USA leadership.
• Coordinate cybersecurity activities with the Norway-based CISO and international security teams.

Requirements

• US Citizenship; Eligibility to maintain a US DoD SECRET Clearance

Qualifications and Skills

• Minimum 10 years of experience in cybersecurity, information assurance, information systems security, or related technical disciplines.
• Minimum 5 years supporting regulated U.S. Government systems or environments subject to cybersecurity compliance requirements.
• Demonstrated experience implementing and assessing NIST SP 800-53 security controls.
• Experience supporting Authority to Operate (ATO), RMF, or comparable accreditation processes.
• Experience developing and maintaining cybersecurity documentation including: System Security Plans (SSPs) POA&Ms Security Policies and Procedures Risk Assessments Continuous Monitoring Documentation
• System Security Plans (SSPs)
• POA&Ms
• Security Policies and Procedures
• Risk Assessments
• Continuous Monitoring Documentation
• Experience supporting environments containing Controlled Unclassified Information (CUI).
• Strong understanding of: NIST Risk Management Framework (RMF) NIST 800-53 NIST 800-171 CMMC Incident Response Vulnerability Management Continuous Monitoring
• NIST Risk Management Framework (RMF)
• NIST 800-53
• NIST 800-171
• CMMC
• Incident Response
• Vulnerability Management
• Continuous Monitoring
• Experience working with both cloud-hosted and on-premises systems.
• Strong understanding of enterprise networking principles, network segmentation, access control, and secure system design.
• Experience collaborating with engineering teams to implement and validate cybersecurity requirements.

Preferred Qualifications and Skills

• Experience supporting DoD, NASA, NOAA, Intelligence Community, or other U.S. Government programs.
• Experience with: Azure Government Microsoft Azure AWS GovCloud OpenStack-based environments Kubernetes platforms
• Azure Government
• Microsoft Azure
• AWS GovCloud
• OpenStack-based environments
• Kubernetes platforms
• Experience supporting environments operating under FedRAMP, RMF, or equivalent government compliance frameworks.
• Familiarity with Security Information and Event Management (SIEM) platforms, vulnerability scanners, endpoint protection platforms, and cloud security tooling.
• Experience reviewing network and cloud architectures from a cybersecurity perspective.
• Understanding of secure software development lifecycle (SSDLC) principles and DevSecOps practices.

Travel

Education