Information Systems Security Officer 1 to support the execution and maintenance of information assurance programs across systems, enclaves, and organizational environments. This role focuses on implementing security policies, maintaining operational security posture, and supporting risk management and compliance activities.
The ideal candidate will assist with day-to-day security operations, documentation, and system authorization efforts while working closely with ISSMs, system administrators, and engineering teams to ensure security requirements are consistently met.
This position requires familiarity with the Risk Management Framework (RMF), system authorization processes, and continuous monitoring activities, along with experience supporting compliance and vulnerability management efforts.
Key Responsibilities: - Support the implementation and enforcement of information systems security policies, standards, and methodologies
- Assist in maintaining the operational security posture of systems and programs
- Perform vulnerability and risk assessments to support system authorization activities
- Support RMF-based security authorization efforts, including ATO maintenance and continuous monitoring
- Prepare and maintain security documentation, including SSPs, POA&Ms, BIAs, CMPs, AARs, CPs, SARs, and RARs
- Manage and assess the security impact of system changes
- Perform configuration management for security-related software, hardware, and firmware
- Evaluate security solutions to ensure compliance with NIST security requirements
- Analyze compliance and configuration scan results and support remediation efforts
- Collaborate with system administrators and system owners to maintain compliance and address vulnerabilities
- Provide support for privileged user access oversight and account management processes
- Maintain system records, including hardware, software, and network components
- Support ISSMs and senior security staff in day-to-day security operations
Qualifications: - Bachelor's degree in Computer Science or related field (4 additional years of ISSO experience may substitute)
- Minimum 5 years of experience as an ISSO or in a related role
- DoD 8570 IAT Level I certification (or higher)
- Experience with RMF processes, including ATO support, security controls, and continuous monitoring
- Hands-on experience with RMF tools, NIST 800-53/800-37, vulnerability scanning, and security documentation (e.g., SSPs, POA&Ms)
Requirements: - U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.
- Certification Requirements:
- DOD 8570 IAT Level I Certification
This position requires an active Security Clearance with appropriate Polygraph.
