ISSO

Bowhead seeks an Information Systems Security Officer (ISSO) to join a dynamic, mission‑oriented team providing Technical Integration Management Support (TIMS) to the U.S. Customs and Border Protection (CBP) Passenger Systems Program Directorate (PSPD). The ISSO will maintain and protect the security posture of mission‑critical CBP applications, ensuring compliance with federal security requirements and coordinating with development teams, audit liaisons, and CBP CISO staff.

Responsibilities

• Serve as an experienced ISSO to maintain the security posture of PSPD applications.
• Obtain and maintain access to the DHS Cyber Security Assessment and Management (CSAM) tool to document and manage all system security artifacts.
• Develop, manage, and update critical security documentation including System Security Plans (SSP), Authority to Operate (ATO) packages, Interconnection Security Agreements (ISA), Privacy Impact Assessments (PIA), and Contingency Plans (CP).
• Monitor system security posture by coordinating with the CBP Vulnerability Assessment Team (VAT) to perform regularly scheduled vulnerability scans.
• Create Plans of Action and Milestones (POA&M) within CSAM for identified security risks, provide remediation timeframes, and update statuses monthly.
• Review all Change Requests (CRs) for security impacts prior to presentation to the Systems Engineering Governance Board (SEGB).
• Review vulnerability scan reports and open Jira tickets to assign remediation tasks to application teams.
• Follow the Agile process for all security‑related work, participating in Sprint Planning, Sprint Reviews, and daily stand‑up meetings.
• Coordinate with the CBP Security Test and Evaluation (ST&E) team to support independent assessment activities and annual penetration testing.
• Actively track and verify the manual installation and renewal of Public Key Infrastructure (PKI) certificates.
• Review and approve/disapprove Technical Reference Model (TRM) requests for the use of new hardware and software.
• Provide a monthly report of accomplishments and outstanding security issues to PSPD Division Directors.
• Other duties as assigned.

Requirements

• Bachelor’s degree in an IT‑related field.
• Minimum of eight (8) years of demonstrated experience in Information Systems Security, Information Assurance, or Cybersecurity supporting federal IT systems.
• Current and favorably adjudicated CBP suitability background investigation or an In‑Scope DoW Top Secret clearance (must be obtainable within 45 days of hire).

Qualifications

• Deep knowledge of FISMA legislation, NIST SP 800‑53 security controls, DISA Security Technical Implementation Guides (STIGs), and DHS/CBP security policies.
• Experience utilizing enterprise risk management and security authorization tools (e.g., CSAM).
• Proficiency with security scanning and monitoring tools used by CBP (e.g., Splunk, Nessus, Anchore, WebInspect, DBProtect, Qualys).
• Prior experience supporting CBP or Department of Homeland Security (DHS) systems as an ISSO is preferred.
• Active cybersecurity certifications such as CISSP, CISM, CAP, or Security+ CE are preferred.

Skills

• Outstanding written and oral communication skills; ability to articulate complex cybersecurity risks to non‑technical stakeholders and development teams.
• Strong analytical and customer‑service orientation.
• Ability to work collaboratively in a schedule‑driven Agile environment.

Physical Demands

• Must be able to lift up to 25 pounds.
• Must be able to stand and walk for prolonged periods.
• Must be able to twist, bend, and squat periodically.

Pay

Targeted salary range is $130,000 to $150,000 annually, based on qualifications and experience. This range is a general guideline; final offers consider scope and responsibilities, work experience, education/training, key skills, internal equity, and market considerations.

Schedule

Core business hours: 8:00 AM – 4:00 PM, Monday through Friday. Primarily onsite in Ashburn, VA, with telework available at the discretion of the Government.