5 years of experience as an Information System Security Officer (ISSO) on similar programs.
Bachelor's degree in Computer Science or related field, or 4 additional years of ISSO experience in lieu of a degree.
Knowledge of current security tools and hardware/software security implementation.
DoD 8570 compliance with IAT Level I or higher required.
Responsibilities
Support information security initiatives and enforce security policies.
Manage daily security operations and maintain system security posture.
Assess security risks and implement solutions for critical information.
Manage security settings for software, hardware, and firmware.
Prepare and review security documents like SSPs and risk assessments.
Support system authorization under the NIST Risk Management Framework (RMF).
Utilize Splunk for monitoring security events and analyzing logs.
Benefits
Comprehensive health insurance options.
Retirement savings plan with company matching.
Professional development and training opportunities.
Flexible work schedule and remote work options.
Full Job Description
Description
Active TS/SCI w/ Polygraph required.
Required Experience:
Five (5) years experience as an ISSO on programs and contracts of similar scope, type and complexity is required. Experience is to include at least one (1) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools. Bachelor's degree in Computer Science or related discipline from an accredited college or university is required. DoD 8570 compliance with IAT Level I or higher is required. Four (4) years of additional experience as an ISSO may be substituted for a bachelor's degree.
Required Skills:
Supports information security • Helps create and enforce security policies and procedures, manage daily security operations, and maintains the system's security posture. • Assesses security risks and solutions for critical information, manages security settings for software, hardware, and firmware, and reviews the security impact of system changes. • Prepares and reviews required security documents, including SSPs, risk assessments, C&A packages, and SRTMs. • Supports system authorization under the NIST Risk Management Framework (RMF). • Uses Splunk to monitor security events, analyze logs, and support incident response.
