Information System Security Officer - ISSO

Job Summary

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies. We have an exciting opportunity for an Information Systems Security Officer (ISSO) to join our Classified Systems team in Herndon, VA.

DUTIES AND RESPONSIBILITIES

• Conducts ongoing vulnerability assessments and security audits to identify cybersecurity risks in accordance with Department of Defense (DoD), Department of Energy (DOE), and Intelligence Community (IC) standards, regulations, and cybersecurity policies/procedures.
• Drives improvements necessary to mitigate those risks.
• Implement cybersecurity requirements for local area networks (LANs), wide area networks (WANs), routers, firewalls, and related network devices which typically requires experience with Cisco IOS.
• Buils and implements workstations and servers running multiple operating systems such as Windows 11, Windows Server, and RedHat Linux.
• Buils and implements virtualization infrastructure using tools such as VMware or HyperV.
• Maintains network, application and operation system security documents and procedures.
• Monitors multiple company information systems for indicators of compromise (IoC) to identify insider threats and potential espionage activity.
• Performs technical analysis of vulnerabilities and leads in the development of vulnerability corrective action plans.

Technical Skills

• Splunk Enterprise, installation and management.
• Nessus Vulnerability Assessment, installation, and management.
• Security Content Automation Protocol (SCAP).
• Security Technical Implementation Guide (STIG) to identify, analyze, and remediate security threats.
• Network and System Administration.
• Active Directory Management.
• Windows Backup procedures and management.
• Implementing secure configurations based on NIST (800-53, 800-171) with Continuous Monitoring (CONMON) principles.

Experiences

• Implemented Splunk Enterprise for real-time security monitoring and incident response, leading to a quantifiable improvement to threat detection and response.
• Utilized Nessus Vulnerability Assessment to identify and prioritize security vulnerabilities within the network infrastructure, resulting in overall security posture.
• Leverage Assured Compliance Assessment Solution (ACAS) to automate security data ingestion and processing, streamlining operations and improving efficiency.
• Ensured system security by adhering to STIGs and utilizing STIG viewer to maintain configuration compliance with industry best practices.
• Supported network and system administration tasks, including user management, access control, and system maintenance.
• Performed regular Windows Backups to ensure data availability in the event of a system failure or security incident.
• Demonstrated understanding of NIST security frameworks (800-53, 800-171, other special publication guides).
• Applied CONMON principles for continuous monitoring and risk mitigation.

Job Qualifications

• Typically requires a bachelors degree in a related discipline and six or more years of progressive professional experience in information assurance or a related field.
• Equivalent professional experience may be substituted in lieu of education.
• Must possess an active Top Secret (with SAP & SCI eligibility).
• Must maintain DoD 8570 IAM Level I (e.g. Security +) professional certification as required by customers or contractual obligations.
• Experience with DoD policy such as Risk Management Framework and Joint SAP Implementation Guide.
• Operational experience with installing, troubleshooting, and auditing Windows desktop & server operating systems.
• Experience with DISA STIGs, SCAP tool, ACAS.
• Experience installing and troubleshooting common x86-based computer hardware.
• Must demonstrate a general understanding of information assurance principles, theories, concepts and techniques.
• Must have experience organizing, planning, scheduling, conducting, and coordinating work assignments to meet project milestones or established completion dates.
• Must possess the ability to understand new concepts quickly and apply them in an evolving environment while contributing to the development of new processes.
• Must be customer focused and possess:
  • The ability to identify issues, analyze data and develop solutions to a variety of problems.
  • Good analytical, verbal and written communication skills to accurately document, report, and present findings.
  • Good interpersonal skills enabling an effective interface with other professionals; and good computer skills.
  • Able to work independently or in a team environment is essential as is the ability to work extended hours as required.