4535 ISSO

OVERVIEW:

We are seeking an Information Systems Security Officer (ISSO) to support the operational security posture of assigned information systems, programs, and enclaves by implementing and enforcing applicable security policies, standards, and methodologies. The ISSO works under the direction of senior ISSOs and the Information System Security Manager (ISSM) to maintain information assurance compliance, support authorization activities, manage security documentation, assess vulnerabilities and risks, evaluate security impacts of system changes, and support day-to-day security operations for systems processing classified information.

GENERAL DUTIES:

• Support senior ISSOs and the ISSM in implementing, enforcing, and maintaining information systems security policies, standards, procedures, and methodologies.
• Plan, coordinate, and support IT security programs and policies, including development and maintenance of system security policies that support compliance with customer, IC, DoW, and NIST RMF requirements.
• Maintain and update required security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Assessment and Authorization (A&A) packages, System Requirements
• Traceability Matrices (SRTMs), and other information assurance documentation.
• Support security authorization and A&A activities in accordance with applicable IC, DoW, customer, and NIST RMF policies, including preparation and coordination of authorization artifacts.
• Perform vulnerability, compliance, and risk-assessment analysis to support certification, accreditation, continuous monitoring, and remediation activities.
• Evaluate security solutions, system changes, and configuration updates to determine security impact and suitability for systems processing classified information.
• Provide security-relevant Configuration Management (CM) support for information system software, hardware, firmware, and system components, including maintaining records for workstations, servers, routers, firewalls, hubs, switches, upgrades, and related assets.
• Support day-to-day security operations, including user identification and authentication processes, security control monitoring, incident coordination, compliance tracking, and transition activities associated with ConMon activities.

REQUIRED QUALIFICATIONS:

• Bachelor's degree in a technical, cybersecurity, information assurance, or related discipline from an accredited college or university is required. Five (5) years of additional information assurance, cybersecurity, or security engineering experience may be substituted for a bachelor's degree.
• Experience supporting ISSO, information assurance, cybersecurity compliance, security authorization, or RMF activities on programs and contracts of similar scope, type, and complexity is required.
• Must meet applicable DoW 8140/8570 requirements for the position. Preferred certifications may include Security+, CySA+, CASP+, CISSP, CAP, or equivalent cybersecurity, information assurance, or RMF-related credentials.

DESIRED QUALIFICATIONS:

• Experience with SSPs, A&A packages, SRTMs, vulnerability management, continuous monitoring, classified information systems, DoW/IC security policies, and NIST RMF processes is preferred.

CLEARANCE:

• Active TS/SCI clearance minimum required