Information System Security Officer (ISSO) SME
Location: Huntsville, AL
Clearance Required: Active Top Secret
Experience Level: SME (Minimum 10 Years)
Education Required: Bachelor's degree (B.S. or B.A.)
Position Overview:
We are seeking a highly experienced Information System Security Officer (ISSO) SME to join our cybersecurity team in Huntsville, AL. The ideal candidate will serve as a senior advisor on all matters concerning information system security, ensuring the confidentiality, integrity, and availability of mission-critical systems. This position involves direct support for system accreditation, risk management, and security compliance under FISMA and NIST 800-53 frameworks. The ideal candidate will have experience with Authority to Operate (ATO) and Plan of Action and Milestones (POA&MS).
Key Responsibilities:
- Serve as the primary security advisor to the Information System Owner (SO), Business Process Owner, and the CISO/ISSM.
- Ensure the implementation and ongoing maintenance of cybersecurity controls in compliance with NIST and FISMA requirements.
- Direct and implement security measures to protect systems from unauthorized modification, disclosure, or destruction.
- Provide physical and logical security guidance for the protection of information system assets.
- Develop, maintain, and revise system security documentation, including System Security Plans (SSPs), Contingency Plans, and ATO packages.
- Lead and support system accreditation and certification efforts, including working within the FBI's ATO processes.
- Conduct network self-inspections and manage system vulnerabilities through the creation of POA&Ms.
- Evaluate, document, and manage NIST 800-53 control implementations.
- Support and utilize GRC tools such as RiskVision, Xacta, and JCAM for continuous monitoring and compliance tracking.
- Produce regular security effectiveness reports and recommend new procedures or technologies to improve posture.
Required Qualifications:
- 10+ years of experience in cybersecurity, risk management, or information assurance.
- In-depth knowledge of Microsoft Windows and Active Directory environments.
- Strong understanding of NIST 800 series publications, particularly NIST 800-53, and FISMA compliance standards.
- Experience supporting or leading ATO accreditation/certification processes.
- Experience with vulnerability management, security auditing, and remediation planning.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field.
- Active Top Secret Clearance required.
Preferred Qualifications:
- CISSP or CompTIA certified
- Experience working with NIST 800-53 control implementation and GRC tools (e.g., RiskVision, Xacta, JCAM)
CULTURE REQUIREMENTS:
• Engineers, Analysts, and Developers at Cintel, Inc. are highly motivated, technical, and self-organized. We place a lot of trust in our team members to develop technical solutions for ill-
defined problems (i.e. thrive in an environment where the problem is vague, requirements are lacking, and a solution is not obvious). We need problem solvers.
• We want our team members to be self-motivated and eager to learn new skills. If you consider yourself a jack-of-all-trades, and are eager to keep up with the latest trends in technology, you'll fit right in.