18 years of experience in Software or Systems Engineering or related fields.
Active TS/SCI clearance with an active Polygraph.
Security+ or equivalent IAT II/III certification required.
Proficiency with XACTA and RMF processes for managing IATT and ATO.
Experience with Splunk and security compliance assessments.
Skilled in developing and maintaining security documentation like SSPs and POA&Ms.
Responsibilities
Conduct technical security assessments and enhance security systems.
Ensure compliance with security standards and manage risks throughout the program lifecycle.
Collaborate with application leads and system administrators to maintain security compliance and achieve ATO.
Provide guidance to ensure security is integrated into system development.
Support security assessment events and address inquiries from ISSMs and SCAs.
Develop and maintain security documentation using XACTA.
Drive IATT and ATO efforts, coordinating with stakeholders and cyber teams.
Implement NIST 800-53 controls in cloud-native environments.
Benefits
Opportunity to work on significant cybersecurity initiatives.
Engagement with a diverse team of cybersecurity professionals.
Exposure to advanced security frameworks and compliance standards.
Potential for career advancement in a high-demand field.
Full Job Description
Information Systems Security Officer (ISSO) - Senior Level
**Active Clearance & Polygraph required
Why This is an Exciting Role:
Responsibilities of this role include:
Conduct technical security assessments and contribute to the security systems.
Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
Work with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
Answer questions to ensure systems are developed with security compliance built in.
Support security assessment events and respond to all questions from ISSMs and SCAs
Develop and maintain SSPs, POA&Ms, and other required security documentation using XACTA.
Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.
Experience and Qualifications:
To be eligible for this demanding position, the ideal candidate should demonstrate the following experience and qualifications:
Required Education and Years of Experience:
18 Years of experience in Software or Systems Engineering roles or a highly related field of work with similar scope and responsibilities.
A bachelor's degree may be substituted for 4 years of experience and a master's degree may be substituted for 6 years of experience.
Required Qualifications:
Active TS/SCI with an Active Polygraph
Security+ or other IAT II/III level certification that is currently active.
Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
Proficiency with Splunk.
Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.
Desired Qualifications:
Prior Information System Security Officer or Information System Security Engineer experience
Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.
Telework/Remote Availability: Telework/Remote work currently not authorized
Work Location(s): Washington, DC; Reston, VA; Annapolis Junction, MD.
Summary Pay Range:
Please note that the information shown below is a general guideline only. Pay is based upon candidate experience and qualifications, as well as market and business considerations.
