Information System Security Officer (ISSO)

Anonymous Employer

Colorado Springs, CO, United States

16 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

4 years minimum

Compensation

$102,000.0 - $149,647.0

Working hours

Regular working hours

Job source

www.clearancejobs.com

Tech stack

Active Directory Audit Trail Cloud Computing Configuration Management Cyber Security Information Systems Linux Information Security Management Windows Servers Security Content Automation Protocol Security Information and Event Management Software Vulnerability Management

+6 more

SC Clearance Information Technology Nessus Splunk Plan of Action and Milestones Vulnerability Analysis

Job description

Support the cybersecurity posture of assigned information systems and ensure compliance with applicable security requirements, policies, and standards.
Assist with implementing, assessing, and maintaining security controls in accordance with RMF and NIST guidance.
Perform continuous monitoring activities and support ongoing authorization efforts.
Review vulnerability assessment results and coordinate remediation activities with system administrators and engineering teams.
Develop and maintain cybersecurity documentation, including SSPs, SOPs, contingency plans, audit artifacts, and supporting accreditation documentation.
Assist with Assessment & Authorization (A&A) activities and support Authority to Operate (ATO) maintenance.
Track, manage, and update POA&M items through resolution.
Support configuration management reviews and evaluate security impacts of system changes.
Investigate security events, support incident response efforts, and assist with reporting requirements.
Conduct user awareness training and ensure compliance with organizational cybersecurity policies.
Collaborate with ISSMs, system administrators, engineers, and program teams to maintain compliance and security readiness.
Support internal and external cybersecurity inspections, audits, and assessments.

Requirements

Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field.
4+ years of Information Assurance, Cybersecurity, ISSO, RMF, or Information Security experience.
DoD 8570 IAT Level II certification required.
Active Secret Clearance required with the ability to obtain a higher clearance if needed.
Experience supporting RMF, NIST 800-53, NIST 800-171, CNSSI, or similar government security frameworks.
Experience reviewing vulnerability scan results and coordinating remediation activities.
Experience maintaining cybersecurity documentation including SSPs, POA&Ms, SOPs, security plans, and accreditation artifacts.
Experience supporting continuous monitoring and security control assessments.
Experience working with system administrators and engineers to implement security controls and remediate findings.
Knowledge of cybersecurity compliance requirements within DoD or federal government environments.
Experience supporting incident response, audit readiness, and security inspections.
Experience with at least one of the following; RMF, NIST 800-53, NIST 800-171, eMASS, ACAS, Nessus, SCAP, Evaluate STIG, STIG Viewer, SSP Development, POA&M Management, ATO Packages, Continuous Monitoring, Splunk, SIEM Technologies, Vulnerability Management Tools, Windows Server, Active Directory, Linux/Unix, Audit Logging, Configuration Management Processes. Derived from L3Harris ISSO requirements and preferred skills. Preferred
Experience serving as an ISSO or ISSM supporting classified environments.
Experience conducting vulnerability assessments and compliance audits.
Experience supporting virtualized and cloud-based environments.
Experience supporting cybersecurity inspections, A&A activities, and accreditation efforts.
Experience using ACAS, Nessus, SCAP, and DISA STIG standards.
Experience with SIEM platforms such as Splunk. Compensation: $102,000 - $149,647/year, commensurate on experience.