Information Systems Security Officer ( ISSO )

Venesco LLC

Aberdeen Proving Ground, MD, United States

7 days ago

Apply on www.juju.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

2 years minimum

Working hours

Regular working hours

Job source

www.juju.com

Tech stack

Cyber Security Information Systems Information Security Management Software Vulnerability Management Information Security Management System SC Clearance Information Technology Vulnerability Analysis

Job description

We are seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role is responsible for maintaining RMF documentation, supporting continuous monitoring, tracking vulnerabilities, managing POA&Ms, and helping ensure systems remain compliant with DoD and NIST security requirements. ISSOs are typically the hands-on security practitioners closest to the system and its operational controls., * Maintain and update the System Security Plan (SSP) and related RMF artifacts

Support continuous monitoring activities, including log review, control checks, and security status tracking
Create, update, and track POA&Ms for identified weaknesses and remediation actions
Analyze vulnerability scan results and validate DISA STIG compliance findings Support RMF steps including categorization, control implementation, assessment, authorization, and monitoring
Maintain system records in eMASS and support package updates
Coordinate incident response activities for assigned systems
Partner with system owners, admins, engineers, and the ISSM to resolve security issues

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred
Typically, 2-4 years of cybersecurity or information assurance experience
Active Secret clearance
Relevant DoD 8140 certifications such as CISSP strongly preferred
Working knowledge of NIST SP 800-53, and DoD cybersecurity compliance processes
Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection
Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related compliance tools
Strong documentation, analytical, and issue-tracking skills
Ability to work with technical and non-technical stakeholders, * Ability to operate in fast-paced, compliance-driven environments
Strong judgment in evaluating cyber risk and balancing mission needs
Proven ability to build trust with technical teams and senior leadership
Detail-oriented approach to documentation, authorization, and continuous monitoring requirements