Information Systems Security Officer (ISSO) 2

About the Role

Amentum is seeking an Information Systems Security Officer (ISSO) 2 for a prime contract based in Linthicum, MD. This role supports a program, organization, system, or enclave's information assurance program, ensuring compliance with security policies, standards, and methodologies.

Responsibilities

• Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
• Maintain operational security posture for an information system or program to ensure adherence to security policies, standards, and procedures.
• Assist with the management of security aspects of the information system and perform day-to-day security operations.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Perform vulnerability/risk assessment analysis to support security authorization.
• Provide configuration management (CM) for information systems security software, hardware, and firmware, including managing changes and assessing their security impact.
• Prepare and review documentation such as System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Support security authorization activities in compliance with the National Institute of Standards and Technology Risk Management Framework (NIST RMF).
• Develop and update the system security plan and other cybersecurity documentation.
• Track and ensure appropriate user identification and authentication mechanisms for the information system.
• Obtain system authorization for information systems under their purview.
• Plan and coordinate the implementation of IT security programs and policies.
• Provide daily oversight and direction to contractor ISSOs.
• Interact with customers, IT staff, and high-level corporate officers to define and achieve required cybersecurity objectives.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, IT Engineering, or a related field. In lieu of a degree, four (4) additional years of work-related experience may be substituted for a total of twelve (12) years.
• Eight (8) years of combined work-related experience in IT, cybersecurity, or security authorization.
• Experience in at least two of the following areas: knowledge of current security tools, hardware/software security implementation, communication protocols, or encryption tools and techniques.
• Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.
• Compliance with DoD 8570.01-M with a minimum certification of IAM Level I.
• Active TS/SCI clearance.

Skills

• Configuration management for security-relevant information system software, hardware, and firmware.
• Development and maintenance of documentation for security authorization in accordance with ODNI and DoD policies.
• Ensuring compliance with system security policies.
• Assessing the security impact of system changes.

Benefits

• Health, dental, and vision insurance.
• Paid time off and holidays.
• Retirement benefits (including 401(k) matching).
• Educational reimbursement.
• Parental leave.
• Employee stock purchase plan.
• Tax-saving options.
• Disability and life insurance.
• Pet insurance.

Note: Benefits may vary based on employment type, location, and applicable agreements.

Pay

$175,000–$190,000 per year.