Job Requirements
Remote Fort Meade, MD
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$115,000 - $125,000
Job Description
The Information Systems Security Officer (ISSO) provides cybersecurity oversight and support for the DoD PKI program at DISA. The ISSO works with technical teams and government stakeholders to maintain security documentation, assess compliance, track security risks, and support the ongoing authorization and secure operation of assigned systems. This position is hybrid onsite at Fort Meade, Maryland, and requires an active Secret clearance.
Responsibilities
Maintain system security documentation, including security plans, security control implementation descriptions, supporting evidence, and operating procedures.
Support Risk Management Framework (RMF) activities, security assessments, and system authorization efforts.
Coordinate with system administrators and engineers to assess security controls and address vulnerabilities, configuration weaknesses, and assessment findings.
Develop and maintain Plans of Action and Milestones (POA&Ms), tracking remediation activities through completion.
Review vulnerability scan results and Security Technical Implementation Guide (STIG) assessments to identify compliance gaps and support corrective actions.
Support continuous monitoring activities and report system security status, outstanding risks, and remediation progress to appropriate stakeholders.
Review proposed system changes for security impacts and coordinate updates to security documentation and control evidence.
Support security requirements for CSP sustainment and CA development activities, including assessment of changes to PKI-related systems.
Assist with security incident reporting and response coordination in accordance with established procedures.
Participate in security reviews, audits, and meetings with government personnel and technical teams.
Required Skills
Eight years of relevant experience in information systems security, cybersecurity compliance, or related work.
Bachelor's degree in cybersecurity, information technology, computer science, or a related field.
Active Secret security clearance.
Experience supporting RMF activities and maintaining security documentation for federal or DoW information systems.
Working knowledge of security controls, vulnerability management, continuous monitoring, and remediation tracking (POA&Ms).
Familiarity with DISA STIGs and the review of system security assessment results.
Ability to communicate security requirements and findings clearly to technical teams and government stakeholders.
Ability to work hybrid onsite at Fort Meade, Maryland.
Desired Skills
Current certification satisfying the IAT Level II requirement (e.g., Security+ CE, CySA+, GSEC, SSCP); not mandatory at submittal per the intake.
DoD PKI, certificate authority (CA), or credential service provider (CSP) experience.
DISA or Fort Meade program experience.
eMASS, ACAS/Nessus, and SCAP/STIG Viewer experience.
Responsibilities
Maintain system security documentation, including security plans, security control implementation descriptions, supporting evidence, and operating procedures.
Support Risk Management Framework (RMF) activities, security assessments, and system authorization efforts.
Coordinate with system administrators and engineers to assess security controls and address vulnerabilities, configuration weaknesses, and assessment findings.
Develop and maintain Plans of Action and Milestones (POA&Ms), tracking remediation activities through completion.
Review vulnerability scan results and Security Technical Implementation Guide (STIG) assessments to identify compliance gaps and support corrective actions.
Support continuous monitoring activities and report system security status, outstanding risks, and remediation progress to appropriate stakeholders.
Review proposed system changes for security impacts and coordinate updates to security documentation and control evidence.
Support security requirements for CSP sustainment and CA development activities, including assessment of changes to PKI-related systems.
Assist with security incident reporting and response coordination in accordance with established procedures.
Participate in security reviews, audits, and meetings with government personnel and technical teams.
Required Skills
Eight years of relevant experience in information systems security, cybersecurity compliance, or related work.
Bachelor's degree in cybersecurity, information technology, computer science, or a related field.
Active Secret security clearance.
Experience supporting RMF activities and maintaining security documentation for federal or DoW information systems.
Working knowledge of security controls, vulnerability management, continuous monitoring, and remediation tracking (POA&Ms).
Familiarity with DISA STIGs and the review of system security assessment results.
Ability to communicate security requirements and findings clearly to technical teams and government stakeholders.
Ability to work hybrid onsite at Fort Meade, Maryland.
Desired Skills
Current certification satisfying the IAT Level II requirement (e.g., Security+ CE, CySA+, GSEC, SSCP); not mandatory at submittal per the intake.
DoD PKI, certificate authority (CA), or credential service provider (CSP) experience.
DISA or Fort Meade program experience.
eMASS, ACAS/Nessus, and SCAP/STIG Viewer experience.
group id: ClearanceJobsSC
