Job Requirements
Colorado Springs, CO
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$102,000 - $149,647
Job Description
Information System Security Officer (ISSO)
Responsibilities
• Support the cybersecurity posture of assigned information systems and ensure compliance with applicable security requirements, policies, and standards.
• Assist with implementing, assessing, and maintaining security controls in accordance with RMF and NIST guidance.
• Perform continuous monitoring activities and support ongoing authorization efforts.
• Review vulnerability assessment results and coordinate remediation activities with system administrators and engineering teams.
• Develop and maintain cybersecurity documentation, including SSPs, SOPs, contingency plans, audit artifacts, and supporting accreditation documentation.
• Assist with Assessment & Authorization (A&A) activities and support Authority to Operate (ATO) maintenance.
• Track, manage, and update POA&M items through resolution.
• Support configuration management reviews and evaluate security impacts of system changes.
• Investigate security events, support incident response efforts, and assist with reporting requirements.
• Conduct user awareness training and ensure compliance with organizational cybersecurity policies.
• Collaborate with ISSMs, system administrators, engineers, and program teams to maintain compliance and security readiness.
• Support internal and external cybersecurity inspections, audits, and assessments.
Requirements
• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field.
• 4+ years of Information Assurance, Cybersecurity, ISSO, RMF, or Information Security experience.
• DoD 8570 IAT Level II certification required.
• Active Secret Clearance required with the ability to obtain a higher clearance if needed.
• Experience supporting RMF, NIST 800-53, NIST 800-171, CNSSI, or similar government security frameworks.
• Experience reviewing vulnerability scan results and coordinating remediation activities.
• Experience maintaining cybersecurity documentation including SSPs, POA&Ms, SOPs, security plans, and accreditation artifacts.
• Experience supporting continuous monitoring and security control assessments.
• Experience working with system administrators and engineers to implement security controls and remediate findings.
• Knowledge of cybersecurity compliance requirements within DoD or federal government environments.
• Experience supporting incident response, audit readiness, and security inspections.
• Experience with at least one of the following; RMF, NIST 800-53, NIST 800-171, eMASS, ACAS, Nessus, SCAP, Evaluate STIG, STIG Viewer, SSP Development, POA&M Management, ATO Packages, Continuous Monitoring, Splunk, SIEM Technologies, Vulnerability Management Tools, Windows Server, Active Directory, Linux/Unix, Audit Logging, Configuration Management Processes. Derived from L3Harris ISSO requirements and preferred skills.
Preferred
• Experience serving as an ISSO or ISSM supporting classified environments.
• Experience conducting vulnerability assessments and compliance audits.
• Experience supporting virtualized and cloud-based environments.
• Experience supporting cybersecurity inspections, A&A activities, and accreditation efforts.
• Experience using ACAS, Nessus, SCAP, and DISA STIG standards.
• Experience with SIEM platforms such as Splunk.
Compensation: $102,000 - $149,647/year, commensurate on experience.
Responsibilities
• Support the cybersecurity posture of assigned information systems and ensure compliance with applicable security requirements, policies, and standards.
• Assist with implementing, assessing, and maintaining security controls in accordance with RMF and NIST guidance.
• Perform continuous monitoring activities and support ongoing authorization efforts.
• Review vulnerability assessment results and coordinate remediation activities with system administrators and engineering teams.
• Develop and maintain cybersecurity documentation, including SSPs, SOPs, contingency plans, audit artifacts, and supporting accreditation documentation.
• Assist with Assessment & Authorization (A&A) activities and support Authority to Operate (ATO) maintenance.
• Track, manage, and update POA&M items through resolution.
• Support configuration management reviews and evaluate security impacts of system changes.
• Investigate security events, support incident response efforts, and assist with reporting requirements.
• Conduct user awareness training and ensure compliance with organizational cybersecurity policies.
• Collaborate with ISSMs, system administrators, engineers, and program teams to maintain compliance and security readiness.
• Support internal and external cybersecurity inspections, audits, and assessments.
Requirements
• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field.
• 4+ years of Information Assurance, Cybersecurity, ISSO, RMF, or Information Security experience.
• DoD 8570 IAT Level II certification required.
• Active Secret Clearance required with the ability to obtain a higher clearance if needed.
• Experience supporting RMF, NIST 800-53, NIST 800-171, CNSSI, or similar government security frameworks.
• Experience reviewing vulnerability scan results and coordinating remediation activities.
• Experience maintaining cybersecurity documentation including SSPs, POA&Ms, SOPs, security plans, and accreditation artifacts.
• Experience supporting continuous monitoring and security control assessments.
• Experience working with system administrators and engineers to implement security controls and remediate findings.
• Knowledge of cybersecurity compliance requirements within DoD or federal government environments.
• Experience supporting incident response, audit readiness, and security inspections.
• Experience with at least one of the following; RMF, NIST 800-53, NIST 800-171, eMASS, ACAS, Nessus, SCAP, Evaluate STIG, STIG Viewer, SSP Development, POA&M Management, ATO Packages, Continuous Monitoring, Splunk, SIEM Technologies, Vulnerability Management Tools, Windows Server, Active Directory, Linux/Unix, Audit Logging, Configuration Management Processes. Derived from L3Harris ISSO requirements and preferred skills.
Preferred
• Experience serving as an ISSO or ISSM supporting classified environments.
• Experience conducting vulnerability assessments and compliance audits.
• Experience supporting virtualized and cloud-based environments.
• Experience supporting cybersecurity inspections, A&A activities, and accreditation efforts.
• Experience using ACAS, Nessus, SCAP, and DISA STIG standards.
• Experience with SIEM platforms such as Splunk.
Compensation: $102,000 - $149,647/year, commensurate on experience.
group id: 10112344