Security Engineer

• Operate as the primary security point of contact for the system and acts as a liaison between the system team and the agency's security and authorizing officials.
• Develop and maintain the System Security Plan (SSP), which is the core document for the ATO package.
• Ensure that a comprehensive Contingency Plan (CP) is developed to outline procedures for system recovery in the event of a security incident or disaster.
• For systems handling personally identifiable information (PII), the ensure a Privacy Impact Assessment (PIA) is completed to assess and mitigate privacy risks.
• Based on the system's security categorization (low, moderate, or high), work with the system team to select and implement the appropriate security controls from NIST Special Publication 800-53.
• Develop and manage the plan for continuous monitoring, which ensures that security controls remain effective and that the system's security posture is maintained post-ATO.
• Support the security assessor team (internal or third-party) during the security assessment. This involves providing system documentation and evidence to demonstrate that controls are implemented correctly and are operating as intended.
• Coordinate and oversee vulnerability scans and penetration tests to identify weaknesses in the system.
• For any security weaknesses identified during the assessment, the ISSO is responsible for developing and tracking the Plan of Action and Milestones (POA&M):. This is a remedial action plan that details how and when the weaknesses will be mitigated.
• The ISSO continuously assesses the system's risk posture and provides a recommendation to the Authorizing Official (AO) regarding the system's readiness for an ATO.
• Compile the final ATO package, which includes the SSP, assessment reports, and POA&M, for review by the AO.

Information System Security Officer, ISSO

Project Coordinator – Autotask MSP Dispatcher, Microsoft Focused CyberSecurity

Senior Manager, Security Risk & Compliance

Cloud Security Architecture Lead

Lead Security Engineer

Field Marketing Manager