The Information System Security Officer (ISSO) will support the cybersecurity compliance and operational security of DoD classified information systems operating within a SIPRNet environment. Working under the direction of the Information System Security Manager (ISSM), you will assist in maintaining Authorization to Operate (ATO) compliance, supporting Risk Management Framework (RMF) activities, preparing for DCSA Cyber Operational Readiness Assessments (CORA), and partnering with Information Technology teams to maintain secure and compliant classified information systems.

Primary Responsibilities

In this role, your primary duties will consist of managing the day-to-day compliance of our classified information system for SIPRNet and maintaining the ATO by:

• Perform routine cybersecurity compliance assessments and security audits to verify compliance with NIST RMF, DCSA DAAG, NISPOM, and organizational security policies.

• Perform in Risk Management Framework (RMF) authorization process by developing and maintaining artifacts for the IS Body of Evidence (BoE).

• Review security-relevant Configuration Management (CM) changes and participate in Change Control Board (CCB) activities to ensure security requirements are maintained throughout the system lifecycle.

• Perform sanitization and release of hardware in accordance with security policies or Authorizing Official (AO) guidance.

• Perform security control assessments, vulnerability analysis, and STIG compliance reviews using approved assessment tools.

• Maintain security authorization artifacts within eMASS and support continuous monitoring activities throughout the system lifecycle.

• Assess and monitor system compliance, auditing, security plan development and delivering information systems security education and awareness

• Investigating information system security violations and help prepare reports specifying corrective and preventative actions

• Conduct technical and administrative assessments

• Integrate new cybersecurity processes, procedures, and tools

• Support the creation, review and update of cybersecurity documentation and other technical writing

• Review audit logs, vulnerability scan results, and security events to identify compliance issues and coordinate corrective actions.

• Coordinate closely with System Administrators, Network Engineers, Program Management, and Physical Security personnel to ensure cybersecurity requirements are integrated into daily operations.

• Cyber Operational Readiness Assessment (CORA) inspection preparation

Basic Qualifications

• Must currently hold an active DoD Secret clearance with eligibility to obtain Top Secret.

• Bachelor's degree with 4+ years of relevant experience, or Master's degree with 2+ years of experience. Additional relevant experience may be considered in lieu of a degree

Relevant Experience Considered (experience in one or more of the following):

• Cybersecurity

• Information Assurance

• Information Technology

• Systems Administration

• Systems Security

• RMF Compliance

• Vulnerability Management

• Information System Auditing

• Must possess one or more industry certifications aligned with the applicable DoD 8140/DoD Cyber Workforce Framework (DCWF) work role (for example, CompTIA Security+, CySA+, CISSP, CISM or equivalent), or the ability to otherwise satisfy DoD 8140 qualification requirements through approved education, training, or experience.

• Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Guide (DAAG), National Industrial Security Program Operating Manual (NISPOM)

• Experience working with and/or supporting computer technologies (such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)

• Experience administering or supporting Windows and/or Linux operating systems within Active Directory enterprise environments, including Group Policy, identity management solutions (such as Delinea), and security hardening.

• Physical security, Project or program management, office management, senior administration, or account management

• Highly organized and self-motivated with excellent documentation skills and the ability to work with minimal supervision.

Preferred Qualifications:

• Working knowledge of DCSA Cyber Operational Readiness Assessments (CORA), Security Vulnerability Assessments (SVA), or other government cybersecurity inspections.

• Familiarity with DoD classified information systems, including SIPRNet or other classified computing environments.

• Knowledge of enterprise vulnerability management and security monitoring tools, such as Splunk, Trellix, Tenable Security Center, ACAS, SCAP Compliance Checker, and STIG Viewer.

• Working knowledge of Windows and Linux operating systems, Active Directory, virtualization technologies, and enterprise identity management solutions.

• Familiarity with the implementation of cybersecurity requirements derived from NIST, DoD, DCSA DAAG, STIGs, and the National Industrial Security Program Operating Manual (NISPOM).

• Knowledge of the Risk Management Framework (RMF), Assessment and Authorization (A&A) processes, and eMASS.

• Ability to provide cybersecurity guidance and collaborate effectively with Information Technology (IT), engineering teams, customers, and other stakeholders in support of classified information systems.

• Familiarity with cyber incident response activities, including detection, containment, eradication, recovery, and reporting.

• One or more additional technical or cybersecurity certifications (for example, Network+, CySA+, CISSP, CISM, CISA, Linux+, Red Hat, Microsoft, VMware, or similar).

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.