Ten years of experience as an ISSO in similar programs or contracts.
Bachelor's degree in Computer Science or related field; additional experience may substitute for degree.
At least two years of experience in security tools, hardware/software security, communication protocols, encryption techniques, or security design.
Experience with certification and accreditation activities, vulnerability assessments, and continuous monitoring.
Information Assurance Management Level I certification or higher.
Responsibilities
Support senior ISSOs in enforcing security policies and procedures.
Assist in preparing and updating system security documentation.
Evaluate security solutions for classified information processing.
Support Risk Management Framework activities and documentation.
Perform vulnerability and risk assessments for system certification.
Maintain operational security posture and daily security operations.
Provide configuration management support for system components.
Benefits
Comprehensive health and wellness programs.
Professional development and training opportunities.
Flexible work arrangements.
Retirement savings plans with company matching.
Paid time off and holidays.
Full Job Description
Description:
Information Systems Security Officer 2 to support the security and compliance of classified information systems. In this role, you will help coordinate and maintain an information assurance program, support certification and accreditation activities, manage system security documentation, and ensure security requirements are incorporated throughout the system lifecycle.
The ideal candidate brings strong experience with information system security, the Risk Management Framework, and the day-to-day administration of security controls across complex systems and environments.
Key Responsibilities:
Support senior ISSOs in implementing and enforcing information system security policies, standards, procedures, and methodologies.
Assist with preparing, maintaining, and updating system security documentation, including System Security Plans and related information assurance materials.
Evaluate security solutions to confirm they meet system requirements for processing classified information.
Support Risk Management Framework activities, including security control implementation, Security Plans, Risk Assessment Reports, certification and accreditation packages, and System Requirements Traceability Matrices.
Perform vulnerability and risk assessment analysis in support of system certification and accreditation.
Maintain system security records, operational security posture, and day-to-day security operations.
Provide configuration management support for information system hardware, software, and firmware.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other in-scope system components.
Administer user identification and authentication mechanisms.
Assist in managing system security and assessing the security impact of proposed changes.
Plan and coordinate information technology security programs and policies.
Provide security support to Information System Security Managers and other program stakeholders.
Support continuous monitoring activities in accordance with applicable National Institute of Standards and Technology guidance.
Serve as an Approval Authority for information systems under assigned control, when required.
Qualifications:
Ten years of experience as an ISSO supporting programs or contracts of similar scope, type, and complexity.
A bachelor's degree in Computer Science or a related technical discipline from an accredited college or university. Four additional years of relevant ISSO experience may be substituted for the degree.
At least two years of experience in two or more of the following areas:
Security tools
Hardware and software security implementation
Communication protocols
Encryption techniques and tools
Security design
Computer Science or related technical disciplines
Experience supporting certification and accreditation activities, vulnerability assessments, risk assessments, and continuous monitoring.
Information Assurance Management Level I certification or higher.
Desired Skills:
Experience with NIST Risk Management Framework requirements and security controls.
Working knowledge of configuration management and system change-impact assessments.
Experience developing or maintaining System Security Plans, Risk Assessment Reports, accreditation documentation, and traceability matrices.
Familiarity with security requirements applicable to classified information systems.
Strong documentation, organization, coordination, and stakeholder communication skills.
Requirements:
U.S. Citizenship is required for all applicants.
Certification Requirements:
IAM Level I Certification Compliance Required
This position requires an active Security Clearance with appropriate Polygraph.
