Information Systems Security Officer (ISSO)

• Conduct comprehensive technical security assessments and contribute to the design of secure systems.
• Manage risk and ensure system security compliance through the entire program life cycle.
• Collaborate with application leads, DBAs, developers, and testers to achieve and maintain Authority to Operate (ATO).
• Develop and maintain critical security documentation, including System Security Plans (SSP) and Plans of Action and Milestones (POA&M), using XACTA.
• Lead Interim Authority to Test (IATT) and ATO efforts by coordinating with stakeholders, cyber teams, and Authorizing Officials (AO).
• Implement and validate NIST 800-53 controls within cloud-native Data Platform as a Service (DPaaS) environments.
• Apply Zero Trust principles to secure data services, specifically focusing on identity, segmentation, and flow control.
• Support security assessment events and respond to technical inquiries from ISSMs and Security Control Assessors (SCA).

• Experience: 13 years of experience in Software/Systems Engineering or a related field (Education substitutions apply: 9 years with a Bachelor’s or 7 years with a Master’s degree).
• Clearance: Active TS/SCI with an active CI Polygraph.
• Certification: Current IAT Level II or III certification (e.g., Security , CISSP, CASP , or CISM).
• Technical Proficiency: Expert knowledge of XACTA, Splunk, and DIA’s Risk Management Framework (RMF) process.
• Frameworks: Hands-on experience with ICD 503 and NIST 800-53 security requirements.
• Documentation: Proven ability to create and manage SSPs, SAPs, and POA&Ms.
• Environment: Ability to work full-time onsite in a Sensitive Compartmented Information Facility (SCIF) with flexible hours.

Desired Attributes:

• Prior experience specifically as an ISSO or ISSE on large-scale government programs.
• Demonstrated leadership in guiding cybersecurity teams and managing complex initiatives.
• Strong communication skills with the ability to translate complex technical concepts for leadership and customer stakeholders.