Information Systems Security Officer

n \n

• Provide oversight of assigned networks to ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM) requirements. \n

• Support and lead RMF Assessment and Authorization (A&A) activities to obtain and maintain system ATOs under federal security requirements. \n

• Collaborate with ISSMs, Information System Owners, Security Control Assessors, Authorizing Officials, and engineering teams to maintain system security. \n

• Develop, review, and maintain Plans of Action and Milestones (POA&Ms), track deficiencies, and coordinate vulnerability remediation. \n

• Perform daily, weekly, monthly, and quarterly Continuous Monitoring (ConMon) reviews, primarily using Splunk. \n

• Assist with incident response activities and verify required system sanitization procedures. \n

• Identify critical and high-risk vulnerabilities and report network security posture to CISO and Authorizing Official stakeholders. \n

• Create and maintain security documentation, policies, procedures, and compliance reports. \n

• Support security assessments, risk analysis, patch validation, and continuous improvement initiatives. \n

• Bachelor’s degree in a related field, or an Associate’s degree with 2+ years of relevant experience, or 4+ years of relevant experience. \n

• IAT Level II certification minimum. \n

• DoD Top Secret Security Clearance is mandatory. \n

• Hands-on experience with RMF, ATO, federal cybersecurity, and information assurance compliance. \n

• Strong knowledge of NIST SP 800-37, 800-53 (Revision 4/5), 800-137, 800-39, 800-171, and related security standards. \n

• Experience preparing and maintaining ATO packages using eMASS and/or Xacta. \n

• Experience with System Security Plans (SSPs), POA&Ms, Contingency Plans, Disaster Recovery Plans, and Incident Response documentation. \n

• Knowledge of vulnerability assessment tools such as ACAS, Tenable Nessus, Security Center, or Nmap. \n

• Experience with STIG compliance, vulnerability remediation, security control assessments, risk analysis, and compliance reporting. \n

• Familiarity with Splunk and continuous monitoring. \n