Bachelor's degree in Computer Science or related field (or 4 additional years of ISSO experience)
Minimum 5 years of experience as an ISSO or in a related role
DoD 8570 IAT Level I certification (or higher)
Experience with RMF processes, including ATO support and continuous monitoring
Hands-on experience with RMF tools and NIST 800-53/800-37
Responsibilities
Support the implementation and enforcement of security policies and standards
Assist in maintaining the operational security posture of systems
Perform vulnerability and risk assessments for system authorization
Support RMF-based security authorization efforts and continuous monitoring
Prepare and maintain various security documentation
Manage and assess the security impact of system changes
Collaborate with system administrators to maintain compliance and address vulnerabilities
Benefits
Opportunity to work on critical information assurance programs
Collaborative environment with ISSMs and engineering teams
Engagement in continuous learning and professional development
Involvement in high-stakes security operations
Potential for career advancement within the organization
Full Job Description
Information Systems Security Officer 1 to support the execution and maintenance of information assurance programs across systems, enclaves, and organizational environments. This role focuses on implementing security policies, maintaining operational security posture, and supporting risk management and compliance activities.
The ideal candidate will assist with day-to-day security operations, documentation, and system authorization efforts while working closely with ISSMs, system administrators, and engineering teams to ensure security requirements are consistently met.
This position requires familiarity with the Risk Management Framework (RMF), system authorization processes, and continuous monitoring activities, along with experience supporting compliance and vulnerability management efforts.
Key Responsibilities:
Support the implementation and enforcement of information systems security policies, standards, and methodologies
Assist in maintaining the operational security posture of systems and programs
Perform vulnerability and risk assessments to support system authorization activities
Support RMF-based security authorization efforts, including ATO maintenance and continuous monitoring
Prepare and maintain security documentation, including SSPs, POA&Ms, BIAs, CMPs, AARs, CPs, SARs, and RARs
Manage and assess the security impact of system changes
Perform configuration management for security-related software, hardware, and firmware
Evaluate security solutions to ensure compliance with NIST security requirements
Analyze compliance and configuration scan results and support remediation efforts
Collaborate with system administrators and system owners to maintain compliance and address vulnerabilities
Provide support for privileged user access oversight and account management processes
Maintain system records, including hardware, software, and network components
Support ISSMs and senior security staff in day-to-day security operations
Qualifications:
Bachelor's degree in Computer Science or related field (4 additional years of ISSO experience may substitute)
Minimum 5 years of experience as an ISSO or in a related role
DoD 8570 IAT Level I certification (or higher)
Experience with RMF processes, including ATO support, security controls, and continuous monitoring
Hands-on experience with RMF tools, NIST 800-53/800-37, vulnerability scanning, and security documentation (e.g., SSPs, POA&Ms)
Requirements:
U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.
Certification Requirements:
DOD 8570 IAT Level I Certification
This position requires an active Security Clearance with appropriate Polygraph.
