Description: Information Systems Security Officer 2 to support the security and compliance of classified information systems. In this role, you will help coordinate and maintain an information assurance program, support certification and accreditation activities, manage system security documentation, and ensure security requirements are incorporated throughout the system lifecycle.
The ideal candidate brings strong experience with information system security, the Risk Management Framework, and the day-to-day administration of security controls across complex systems and environments.
Key Responsibilities: - Support senior ISSOs in implementing and enforcing information system security policies, standards, procedures, and methodologies.
- Assist with preparing, maintaining, and updating system security documentation, including System Security Plans and related information assurance materials.
- Evaluate security solutions to confirm they meet system requirements for processing classified information.
- Support Risk Management Framework activities, including security control implementation, Security Plans, Risk Assessment Reports, certification and accreditation packages, and System Requirements Traceability Matrices.
- Perform vulnerability and risk assessment analysis in support of system certification and accreditation.
- Maintain system security records, operational security posture, and day-to-day security operations.
- Provide configuration management support for information system hardware, software, and firmware.
- Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other in-scope system components.
- Administer user identification and authentication mechanisms.
- Assist in managing system security and assessing the security impact of proposed changes.
- Plan and coordinate information technology security programs and policies.
- Provide security support to Information System Security Managers and other program stakeholders.
- Support continuous monitoring activities in accordance with applicable National Institute of Standards and Technology guidance.
- Serve as an Approval Authority for information systems under assigned control, when required.
Qualifications: - Ten years of experience as an ISSO supporting programs or contracts of similar scope, type, and complexity.
- A bachelor's degree in Computer Science or a related technical discipline from an accredited college or university. Four additional years of relevant ISSO experience may be substituted for the degree.
- At least two years of experience in two or more of the following areas:
- Security tools
- Hardware and software security implementation
- Communication protocols
- Encryption techniques and tools
- Security design
- Computer Science or related technical disciplines
- Experience supporting certification and accreditation activities, vulnerability assessments, risk assessments, and continuous monitoring.
- Information Assurance Management Level I certification or higher.
Desired Skills: - Experience with NIST Risk Management Framework requirements and security controls.
- Working knowledge of configuration management and system change-impact assessments.
- Experience developing or maintaining System Security Plans, Risk Assessment Reports, accreditation documentation, and traceability matrices.
- Familiarity with security requirements applicable to classified information systems.
- Strong documentation, organization, coordination, and stakeholder communication skills.
Requirements: - U.S. Citizenship is required for all applicants.
- Certification Requirements:
- IAM Level I Certification Compliance Required
This position requires an active Security Clearance with appropriate Polygraph. 
