Information Systems Security Officer (ISSO) 2
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content.
We need to parse the posting.
Key parts:
- Purpose and Impact: description of role. Could be "About the role". We'll put that under About the role
with
containing that description. - Work Schedule: "The courses being supported are active from 0800-1700 M-F. Contract core hours are 1000-1400." That's schedule info. So we can include Schedule section. - Essential Responsibilities: list of responsibilities. We'll put under Responsibilities. - Security Clearance Required: TS/SCI with Poly. Minimum Education: etc. That's qualifications/requirements. We'll put under Requirements or Qualifications. The spec says we can have Requirements, Qualifications, Skills sections. We need to decide. We have: Minimum Education, Minimum Years of Experience, Required Certifications, etc. That's qualifications. We also have: "Experience in the Risk Management Framework (RNIF), Information Systems Security technologies, IT policies, and ability to interpret policies and directives is desired." That's desired experience. We have: "Network and system administration may be used to meet some, but not all, of the relevant experience requirement." That's also qualification. We have: "Required Certifications: Information Assurance Manager (IAM) Tier I certification requirements must be met within 6 months of assignment to the position." Thus we can put under Requirements or Qualifications. We also have: Benefits Overview: list of benefits. So Benefits section. Compensation Details: Pay range $160000 - $200000. So Pay section. We also have: "Other Responsibilities: Safety - ..." etc. That's more responsibilities but seems like generic company policies; we should remove boilerplate like safety, quality, procedure compliance, EEO, etc. The instruction: Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we should discard the "Other Responsibilities: Safety - ..." etc as boilerplate. Also discard "Qualified applicants will receive consideration..." EEO. Also discard "Original Posting: 08/28/2026 - Until Filled ..." etc. Also discard "Amentum anticipates this job requisition will remain open..." etc. Also discard "Learn more about your rights..." etc. Thus we keep only substantive content: Purpose and Impact, Work Schedule, Essential Responsibilities (list), Security Clearance Required, Minimum Education, Minimum Years of Experience, Required Certifications, Benefits Overview, Compensation Details. We need to format as sections. We should not repeat job title as heading. We need to use
for section headings.
We need to use - for any list of duties/requirements/benefits.
We need to use
for prose.
We must not include sections with filler like "commensurate with experience". Not present.
We need to preserve all substantive information.
Let's extract each piece.
Purpose and Impact paragraph:
"Purpose and Impact: Independently executes and coordinates day-to-day security operations for assigned systems limited supervision. Leads execution of continuous monitoring technical activities, including scan scheduling/executed support, log/alert triage, STIG compliance verification, and security tool health/coverage checks. Coordinates remediation actions with system administrators and engineers, validates corrective actions through re-scan/re-check activities, and maintains accurate operational security evidence repositories. Provides technical evidence and posture inputs to the ISSM to support RMF reporting and assessments. The ISSO does not own RMF package governance, does not manage POA&Ms as the accountable authority, and does not make risk acceptance decisions."
We'll put that as prose under About the role.
Work Schedule:
"Work Schedule: The courses being supported are active from 0800-1700 M-F. Contract core hours are 1000-1400."
We'll put under Schedule.
Essential Responsibilities: It starts with "Essential Responsibilities: The Level 2 Information Systems Security Officer (ISSO) shall possess the following capabilities:" then a list.
We need to capture the list items. The text after colon seems to be a run-on sentence with multiple responsibilities separated by periods. We need to split into list items.
Let's parse:
"Lead day-to-day security operations for assigned systems, including monitoring/triage of security alerts/logs, validation of security tool health/coverage, and escalation of incidents per SOP. response activities as directed, and driving timely resolution/escalation of anomalies in accordance with established procedures"
There's a weird fragment: "response activities as directed," maybe missing word. We'll keep as is.
"Plan and execute vulnerability and compliance scanning activities (credentialed/noncredentialled as approved), perform basic false-positive review, document results, and maintain remediation tickets with accurate technical detail."
"Execute and validate STIG/compliance posture checks (as assigned) and coordinate remediation with administrators; validate fixes via re-check and document completion evidence."
"Maintain security evidence repositories for assigned systems (scan outputs, STIG checklists, tool status evidence, access review artifacts as assiY1ed) ensuring labeling, access control, and retrievability."
"Support IAM control execution by coordinating account actions with administrators and supporting periodic access reviews; document results and discrepancies for disposition by Government/ISSM"
"Provide technical security-impact inputs for proposed changes (affected components, required re-scan/re-test recommendations, control evidence impacts as observed) to support change control discussions (non-approval role)."
"Produce recurring technical posture inputs (scan tends, top recurring findings, remediation aging) for ISSW/Government reporting and drive timely updates of tickets to reflect current status."
We'll make each as
- .
Note there is a typo "assiY1ed" but we preserve.
Now Security Clearance Required: "Security Clearance Required: TS/SCI with Poly"
Minimum Education: "Minimum Education: A Doctoral degree No experience; ORA Master’s degree plus 3 year of relevant experience; ORA Bachelor's degree plus 5 years of relevant experience; ORAn Associate's degree or 18 semester hours of military coursework/training in a computer-related field plus 7 years of relevant experience may be considered;Degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Information Science, Cyber Security, or related is preferred"
We need to preserve that exactly? It's a bit messy with missing spaces. We'll keep as is.
Minimum Years of Experience: "Minimum Years of Experience: Relevant experience must be in information systems design, development, programming, information/computer/cyber/network security, vulnerability analysis, penetration testing, computer forensics, computer systems research, reverse engineering, and/or systems engineering (i.e., requirements analysis, design, implementation, testing, integration, deployment/installation, and maintenance). Experience in the Risk Management Framework (RNIF), Information Systems Security technologies, IT policies, and ability to interpret policies and directives is desired. Network and system administration may be used to meet some, but not all, of the relevant experience requirement."
Required Certifications: "Required Certifications: Information Assurance Manager (IAM) Tier I certification requirements must be met within 6 months of assignment to the position. Maintaining certification status is required through continuous education training or sustainment training while serving in this work role #javelin"
We may keep the "#javelin" as part of text? It's likely a tag; we can keep.
Benefits Overview: list:
"Offerings include: Health, dental, and vision insurancePaid time off and holidaysRetirement benefits (including 401(k) matching)Educational reimbursementParental leaveEmployee stock purchase planTax-saving optionsDisability and life insurancePet insurance"
Note missing spaces after commas; we preserve.
We'll make each as
- .
Pay: "Compensation Details: $160000 - $200000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws."
We'll put that as prose under Pay.
Now we need to decide which sections to include: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We have content for About the role (Purpose and Impact). Responsibilities (Essential Responsibilities). Requirements/Qualifications: we have Security Clearance, Minimum Education, Minimum Years of Experience, Required Certifications. Could split into Requirements (clearance, certifications) and Qualifications (education, experience). But we can also combine into one section "Requirements". The instruction: Prefer a few substantive sections over many thin ones. So we could have one section "Requirements" that includes all those. Or we could have "Qualifications". Let's choose "Requirements" to include security clearance, education, experience, certifications. That's substantive.
Skills: Not explicitly listed; we could omit.
Benefits: we have.
Pay: we have.
Schedule: we have.
Thus sections: About the role, Responsibilities, Requirements, Benefits, Pay, Schedule.
Now produce HTML fragment.
We must not include or . Just the fragment.
We'll output:
About the role
...
Responsibilities
- ...
...
Requirements
Security Clearance Required: TS/SCI with Poly
Minimum Education: A Doctoral degree No experience; ORA Master’s degree plus 3 year of relevant experience; ORA Bachelor's degree plus 5 years of relevant experience; ORAn Associate's degree or 18 semester hours of military coursework/training in a computer-related field plus 7 years of relevant experience may be considered;Degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Information Science, Cyber Security, or related is preferred
Minimum Years of Experience: Relevant experience must be in information systems design, development, programming, information/computer/cyber/network security, vulnerability analysis, penetration testing, computer forensics, computer systems research, reverse engineering, and/or systems engineering (i.e., requirements analysis, design, implementation, testing, integration, deployment/installation, and maintenance). Experience in the Risk Management Framework (RNIF), Information Systems Security technologies, IT policies, and ability to interpret policies and directives is desired. Network and system administration may be used to meet some, but not all, of the relevant experience requirement.
Required Certifications: Information Assurance Manager (IAM) Tier I certification requirements must be met within 6 months of assignment to the position. Maintaining certification status is required through continuous education training or sustainment training while serving in this work role #javelin
Benefits
- Health, dental, and vision insurance
- Paid time off and holidays
- Retirement benefits (including 401(k) matching)
- Educational reimbursement
- Parental leave
- Employee stock purchase plan
- Tax-saving options
- Disability and life insurance
- Pet insurance
Pay
Compensation Details: $160000 - $200000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills,
for prose. We must not include sections with filler like "commensurate with experience". Not present. We need to preserve all substantive information. Let's extract each piece. Purpose and Impact paragraph: "Purpose and Impact: Independently executes and coordinates day-to-day security operations for assigned systems limited supervision. Leads execution of continuous monitoring technical activities, including scan scheduling/executed support, log/alert triage, STIG compliance verification, and security tool health/coverage checks. Coordinates remediation actions with system administrators and engineers, validates corrective actions through re-scan/re-check activities, and maintains accurate operational security evidence repositories. Provides technical evidence and posture inputs to the ISSM to support RMF reporting and assessments. The ISSO does not own RMF package governance, does not manage POA&Ms as the accountable authority, and does not make risk acceptance decisions." We'll put that as prose under About the role. Work Schedule: "Work Schedule: The courses being supported are active from 0800-1700 M-F. Contract core hours are 1000-1400." We'll put under Schedule. Essential Responsibilities: It starts with "Essential Responsibilities: The Level 2 Information Systems Security Officer (ISSO) shall possess the following capabilities:" then a list. We need to capture the list items. The text after colon seems to be a run-on sentence with multiple responsibilities separated by periods. We need to split into list items. Let's parse: "Lead day-to-day security operations for assigned systems, including monitoring/triage of security alerts/logs, validation of security tool health/coverage, and escalation of incidents per SOP. response activities as directed, and driving timely resolution/escalation of anomalies in accordance with established procedures" There's a weird fragment: "response activities as directed," maybe missing word. We'll keep as is. "Plan and execute vulnerability and compliance scanning activities (credentialed/noncredentialled as approved), perform basic false-positive review, document results, and maintain remediation tickets with accurate technical detail." "Execute and validate STIG/compliance posture checks (as assigned) and coordinate remediation with administrators; validate fixes via re-check and document completion evidence." "Maintain security evidence repositories for assigned systems (scan outputs, STIG checklists, tool status evidence, access review artifacts as assiY1ed) ensuring labeling, access control, and retrievability." "Support IAM control execution by coordinating account actions with administrators and supporting periodic access reviews; document results and discrepancies for disposition by Government/ISSM" "Provide technical security-impact inputs for proposed changes (affected components, required re-scan/re-test recommendations, control evidence impacts as observed) to support change control discussions (non-approval role)." "Produce recurring technical posture inputs (scan tends, top recurring findings, remediation aging) for ISSW/Government reporting and drive timely updates of tickets to reflect current status." We'll make each as
About the role
...
Responsibilities
- ... ...
Requirements
Security Clearance Required: TS/SCI with Poly
Minimum Education: A Doctoral degree No experience; ORA Master’s degree plus 3 year of relevant experience; ORA Bachelor's degree plus 5 years of relevant experience; ORAn Associate's degree or 18 semester hours of military coursework/training in a computer-related field plus 7 years of relevant experience may be considered;Degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Information Science, Cyber Security, or related is preferred
Minimum Years of Experience: Relevant experience must be in information systems design, development, programming, information/computer/cyber/network security, vulnerability analysis, penetration testing, computer forensics, computer systems research, reverse engineering, and/or systems engineering (i.e., requirements analysis, design, implementation, testing, integration, deployment/installation, and maintenance). Experience in the Risk Management Framework (RNIF), Information Systems Security technologies, IT policies, and ability to interpret policies and directives is desired. Network and system administration may be used to meet some, but not all, of the relevant experience requirement.
Required Certifications: Information Assurance Manager (IAM) Tier I certification requirements must be met within 6 months of assignment to the position. Maintaining certification status is required through continuous education training or sustainment training while serving in this work role #javelin
Benefits
- Health, dental, and vision insurance
- Paid time off and holidays
- Retirement benefits (including 401(k) matching)
- Educational reimbursement
- Parental leave
- Employee stock purchase plan
- Tax-saving options
- Disability and life insurance
- Pet insurance
Pay
Compensation Details: $160000 - $200000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills,