Information Security System Officer (ISSO)

Job description

Job responsibilities

• Maintain accredited classified systems in an authorized operating state while meeting program delivery timelines
• Author, update, and defend RMF artifacts: System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, Risk Assessment Reports, Configuration Management Plans, Incident Response Plans, Continuous Monitoring…
• Execute continuous monitoring: ACAS and Nessus vulnerability scanning, SCAP and STIG compliance checking, audit log review, and remediation tracking against CAT I, II, and III findings
• Support the design, development, and implementation of procedures and systems for secure facilities, and ensure facility compliance with requirements for classified information system processing
• Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, threats, and protection needs, and recommend mitigations
• Lead periodic self-inspections and support DoD Cybersecurity On-Site Inspections, DCSA assessments, and customer security reviews across both sites
• Serve as first-line response for classified security incidents and spillage: detect, contain, preserve evidence, document, and escalate through the ISSM and program security chain
• Administer and harden classified computing and network infrastructure, including standing up and configuring new enclaves

Job requirements

• Bachelor's degree in a relevant field, or a minimum of 5 years of ISSO, ISSE, or cybersecurity policy and engineering experience in a classified environment
• DoD 8570/8140 IAM Level I/IAT Level 2 (Security +) as a condition of employment
• Demonstrated proficiency applying RMF and writing authorization packages, with working knowledge of ICD-503, JSIG, and the NIST 800 series (800-53, 800-37, 800-171)
• Hands-on experience with security tooling: NESSUS and ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, and HBSS or ESS
• Experience designing, building, and maintaining information system enclaves, including the underlying computing hardware and network architecture
• Working knowledge of incident response, disaster recovery, forensic principles, continuous monitoring, and cybersecurity hygiene
• Active DoD security clearance (SECRET minimum) and U.S. citizenship
• Prior SAP experience as an ISSO, ISSE, or system administrator under JSIG, with current or recent program briefings