5-7 years of experience in cybersecurity and information security roles.
Strong knowledge of NIST, RMF, and DoD cybersecurity regulations.
Proficient in managing security documentation like SSPs and SARs.
Experience with security tools such as Nessus and Splunk.
Familiarity with cloud environments and security controls.
Security certifications like CISSP, CAP, and Security+ are required.
Knowledge of various operating systems including Windows and Linux.
Responsibilities
Ensure compliance with federal and DoD cybersecurity standards.
Maintain and update critical security documentation.
Coordinate security assessments and audits with stakeholders.
Conduct risk assessments and provide mitigation recommendations.
Oversee system authorization activities per RMF guidelines.
Monitor system security posture and incident response efforts.
Collaborate with technical teams to integrate security requirements.
Benefits
100% company-paid medical, dental, and vision premiums for employees and dependents.
401(k) plan with an 8% total company contribution.
Up to 20 days of flexible paid time off (PTO) and 11 paid holidays.
Flexible work schedules to promote work-life balance.
Employee referral bonuses up to $10,000.
Full Job Description
Requisition ID: 5339
Standard Title:
Required Security Clearance: Top Secret/SCI with Full Scope Polygraph
Location: Annapolis Junction, MD
Work Type: On-Site
Shift: First
Referral Eligibility: Eligible
U.S. Citizenship Required? Yes
Position Summary
Information Systems Security Officer (ISSO) to join our team. Our ISSOs are responsible for ensuring the security posture of mission-critical systems by supporting compliance efforts, managing risk, and enforcing security policies. We're looking for individuals who excel at navigating complex cybersecurity environments, maintaining meticulous documentation, and fostering collaboration between technical teams and government stakeholders. The ideal candidate will have strong knowledge of security regulations, be adaptable, and possess excellent communication skills to drive information security initiatives forward. Essential Duties and Responsibilities
Ensure system compliance with federal, DoD, and IC cybersecurity regulations and standards, including NIST, ICD 503, CNSS, and RMF.
Maintain and update security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and Continuous Monitoring Plans.
Coordinate and support security assessments, audits, and inspections by internal and external stakeholders.
Conduct risk assessments and vulnerability analysis, providing recommendations for mitigating identified risks.
Facilitate and oversee system authorization activities in accordance with the Risk Management Framework (RMF) process.
Monitor and report on system security posture, incident response, and remediation efforts.
Collaborate with Information Systems Security Engineers (ISSEs), system administrators, and program managers to integrate security requirements into system lifecycle.
Provide security awareness training to system users and enforce proper security practices.
Act as a liaison between the organization and government customers, ensuring timely communication of security updates and issues.
Required Qualifications
Experience with security frameworks and policies: NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs, FISMA, FedRAMP.
