Mid-Career Information System Security Officer

About the role

The Information System Security Officer (ISSO) will ensure compliance through the implementation of mandatory information system security requirements on assigned information systems utilizing various government guidance publications.

Responsibilities

• Coordinate and manage interactions with government partners to facilitate and maintain 100% active status of all Authorizations to Operate.
• Oversee technical administration of information systems in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF) to include Continuous Monitoring, Plan of Action and Milestones (POA&M), and Change Management.
• Develop and implement government-approved information system security procedures and system security plans for the operation of networked and standalone classified systems.
• Communicate, implement, and manage a formal cybersecurity program.
• Oversee and conduct risk assessments on cybersecurity architecture and perform comprehensive investigations of computer security incidents, collaborating with outside agencies as required.
• Ensure configuration management (CM) for security-relevant software, hardware, and firmware.
• Aid and conduct cybersecurity education and training.
• Aid in conducting investigations of computer security violations and incidents.
• Handle mission requirements which may drive unpredictable work hours/schedules.

Requirements

• Active Secret security clearance.
• DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, CCNA Security, CND).
• Proven hands on experience with industry standard cybersecurity tools, including vulnerability scanners (e.g., Tenable), Security Incident and Event Management (SIEM) and auditing platforms (e.g., Splunk), endpoint protection solutions (e.g., Trellix), and package submission tools (e.g., eMASS, XACTA).
• Demonstrated ability to lead the Risk Management Framework (RMF) process to secure Authorizations to Operate (ATO), encompassing Defense Counterintelligence and Security Agency (DCSA) authorizations.
• Strong technical root cause analysis skills with a track record of developing corrective actions, policies, and procedures to resolve discrepancies.
• Experience conducting risk and vulnerability assessments in line with applicable regulations, such as the DCSA Assessment and Authorization Guide (DAAG), National Industrial Security Program Operating Manual (NISPOM), NIST Special Publication (SP) 800-53, and various DISA Security Technical Implementation Guides (STIGs).

Qualifications

• DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, CASP+/SecurityX) is desired.
• Proven track record of deploying and integrating complex, multi-classification technologies across large-scale, enterprise-wide environments.
• Network device administration experience to include security best practices and monitoring of firewall, routers, and switches.
• Strong background in Agile and DevSecOps methodologies and associated toolsets (e.g., JIRA, Confluence, Docker, Ansible, Git).
• In-depth knowledge of the NISPOM and the DAAG.
• Familiarity with key security frameworks and guidelines, including the Joint Special Access Program (JSIG) Implementation Guide, CNSSI 1253, and NIST SP 800-37 (Risk Management Framework).
• Experience with Communications Security (COMSEC).
• Proficient in AI prompting as it applies to this position and practice.

Skills

• Proficient in AI prompting as it applies to this position and practice.

Benefits

• Full-Time Salary Range: $85300.00 - $158300.00
• Total Rewards program includes medical, dental, vision, flexible work arrangements and schedules, 401(k) match, paid time off, holidays, parental leave, EAP, flexible spending accounts, education assistance, life insurance, short-term disability, and long-term disability.
• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position.