Information Systems Security Officer

The Information Systems Security Officer will support the implementation, operation, and continuous monitoring of cybersecurity controls across assigned information systems. The ISSO will work closely with cybersecurity leadership, system administrators, network engineers, system owners, and other technical stakeholders to ensure systems are securely configured, vulnerabilities are identified and remediated, and applicable federal cybersecurity requirements are maintained., * Implement and maintain security policies, procedures, standards, and technical security controls for assigned systems.

• Support the configuration, administration, monitoring, and assessment of network security technologies, including firewalls, IDS/IPS, VPNs, security monitoring platforms, and vulnerability management tools.
• Review firewall rules, network access controls, security configurations, and system connectivity to identify security weaknesses and support remediation activities.
• Monitor network and system security events for suspicious or unauthorized activity and assist with incident investigation, response, containment, and documentation.
• Conduct cybersecurity risk assessments, security reviews, vulnerability assessments, and control evaluations.
• Support implementation and continuous monitoring of security controls in accordance with NIST, RMF, DISA STIGs, and applicable customer requirements.
• Coordinate with network engineers, system administrators, developers, and other technical personnel to integrate cybersecurity requirements into system architecture and operations.
• Support vulnerability remediation activities, including review of scan findings, STIG compliance results, technical vulnerabilities, and corrective actions.
• Develop and maintain cybersecurity documentation, including security procedures, risk assessments, control documentation, system artifacts, and supporting evidence.
• Assist with Assessment and Authorization (A&A) activities and preparation of authorization documentation, POA&Ms, and continuous monitoring artifacts.
• Provide technical cybersecurity guidance to system owners, users, and program stakeholders.
• Prepare security status reports, findings, risk summaries, and recommendations for cybersecurity and program leadership.
• Remain current on emerging cyber threats, vulnerabilities, security technologies, and federal cybersecurity requirements.

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related discipline and 47 years of relevant information security or cybersecurity experience.
• Hands-on experience supporting network and system security technologies, including firewalls, IDS/IPS, SIEM, vulnerability scanners, or related cybersecurity tools.
• Working knowledge of cybersecurity frameworks and requirements, including NIST, Risk Management Framework (RMF), security controls, risk assessment, and vulnerability management.
• Demonstrated experience performing cybersecurity assessments, incident response, security monitoring, and remediation activities in enterprise environments.
• CISSP, CISM, Security+, CASP+, CCNP Security, or equivalent cybersecurity certification.

Preferred Qualifications

• Experience supporting Department of War (DoW), Department of State (DoS), or other federal government information systems.
• Experience administering or supporting enterprise firewall technologies such as Palo Alto Networks, Cisco Firepower/ASA, Fortinet FortiGate, Check Point, or similar platforms.
• Understanding of TCP/IP, routing, switching, VLANs, ACLs, NAT, VPN technologies, and network segmentation.
• Experience with ACAS, DISA STIGs, eMASS, RegScale, or similar security and compliance platforms.
• Familiarity with cloud security requirements and AWS or other cloud-based environments.
• Experience with Zero Trust Architecture, network segmentation, and secure access controls.

Clearance

• A minimum of an active Secret security clearance is required