Information Systems Security Officer (ISSO)

About the role

The Information Systems Security Officer (ISSO) will help execute the cybersecurity program supporting collateral, SAP, and SCI systems as various USG doctrines require, including 32 CFR Part 117, DCSA DAAG, DoDM 5205.07, JSIG, DoD 5105.21, and ICD 503 and its supplements.

Responsibilities

• Develop and update RMF documents, including SSPs, addendums, POA&Ms, SCTMs, SOPs, CONOPS, test plans, etc.
• Perform technical security control assessments to identify vulnerabilities and potential deficiencies as part of the continuous monitoring program.
• Conduct cybersecurity sustainment activities, including change management, account management, auditing, media protection, user training, file transfers, etc.
• Conduct system audits, system baseline validations, and ConMon activities.
• Interface with internal/external customers, program managers, IT staff, senior leadership, etc.
• Support initial and annual general/privileged user training and associated functions.
• Support various actions related to cyber incident response, investigation, and resolution.
• Develop and enforce cybersecurity policies and procedures for accredited systems.

Requirements

• TS clearance with SCI eligibility and Counterintelligence (CI) Polygraph.
• Experience developing SSPs and RMF packages including using eMASS.
• Experience with various information system security assessment/hardening tools - SCAP Compliance Checker, STIG Viewer, Nessus, Rapid7, NMAP, etc.
• Experience with SIEMs and audit reduction tools such as Splunk.
• Practitioner knowledge of wide and local area networks, including servers, workstations, routers, switches, and firewalls.
• DoDD 8570/8140 IAM Level 1 professional certification (e.g., Security+CE).
• Minimum 3 years prior ISSO experience.
• Self-starter with the ability to work independently, customer service orientated.
• In-depth knowledge of NIST special publications, CNSS policies, and instructions.

Qualifications and Skills

• Adjudicated Full Scope Polygraph.
• DoDD 8570/8140 IAM Level 2 professional certification (e.g. CISM, CISSP).
• Experience working with shell tools / scripts such as CMD, PowerShell, and Linux shell.
• Experience auditing multiple OS environments including Windows and Linux, as well as endpoint devices and virtual machines.

Desired Qualifications and Skills

• Advanced knowledge of work area typically obtained through advanced education combined with experience.
• Practical knowledge of project management.
• Engineering/Other Technical Positions typically require a degree in Science, Technology, Engineering or Mathematics (STEM) and a minimum of 5 years of prior relevant experience unless prohibited by local laws/regulations.

Pay

Competitive salaries with excellent benefits for you and your family.

• Competitive medical, dental, and vision plans.
• Child, elderly, and dependent-care programs.
• Mental health resources.
• Generous tuition assistance and 401k matching programs.
• Flexible work schedules, a peer recognition and reward system, and performance-based bonuses.

Schedule

Onsite