Information Systems Security Officer (TS/SCI)

Implement and maintain information systems security policies, procedures, and controls in accordance with DoD cybersecurity requirements, NIST standards, and applicable security guidance.

• Support Risk Management Framework (RMF) and Authorization to Operate (ATO) processes, including preparation of authorization packages, security assessments, and coordination with Authorizing Officials (AOs) and Security Control Assessors (SCAs).
• Develop, review, and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other required authorization artifacts.
• Conduct risk and vulnerability assessments using security tools such as ACAS, Tenable, SCAP, and STIGs, and provide recommendations for remediation and risk mitigation.
• Support continuous monitoring activities, including evaluating security controls, identifying vulnerabilities, and tracking corrective actions.
• Monitor and document security-relevant configuration changes to hardware, software, and systems to maintain compliance with approved security baselines.
• Investigate, document, and report security incidents and compliance violations, and assist in implementing appropriate corrective measures.
• Coordinate with Information Systems Security Managers (ISSMs), system administrators, government program managers, and other stakeholders to ensure security requirements are addressed throughout the system life cycle.
• Support cybersecurity training, awareness, inspections, and self-assessments to maintain compliance with applicable DoD security requirements.
• Collaborate with IT, engineering, and technical teams to integrate cybersecurity requirements into system designs, operations, and processes.
• Support security procedures for classified information systems, including media handling, sanitization, system interconnections, and Assured File Transfers (AFT), as applicable.

Bachelor’s degree and 5+ years of related cybersecurity or information systems security experience.

• Minimum of 3 years of experience serving as an ISSO or in a comparable information systems security role.
• Strong knowledge of DoD cybersecurity requirements, NIST standards, and the Risk Management Framework (RMF).
• Experience supporting system assessment and authorization activities, including ATO processes and security documentation.
• Familiarity with cybersecurity assessment and vulnerability management tools, including ACAS, SCAP, and STIGs.
• Experience supporting classified information systems or Special Access Programs (SAPs).
• Strong analytical, problem-solving, communication, and documentation skills.
• Active TS/SCI clearance

Certifications:

• Intermediate or Advanced 8140 Certificates, one or more of the following: Intermediate: Sec+, SSCP, GSEC, CGRC/CAP, CCSP, CCISO, CASP+ Advanced: CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCIH, GCSA, GICSP, GSLC.