Cyber and Information Systems Security Analyst/ISSO

Johns Hopkins Applied Physics Lab • Laurel, MD

407d • $90,000 - $330,000

About The Position

The Cyber and Information Systems Security Analyst/ISSO at Johns Hopkins Applied Physics Laboratory (APL) is responsible for ensuring the organization's technological infrastructure complies with Department of Defense (DoD) and Intelligence Community (IC) standards. This role involves collaborating with various stakeholders to develop secure IT solutions for classified environments, preparing essential security documentation, conducting audits, and analyzing security reports to maintain a robust security posture.

Requirements

• Hold an active TS/SCI+FullScope Poly security clearance.
• Possess a current DoD 8570 certification (Security+, CISSP, etc.).
• Have a minimum of 5 years' experience solving information technology problems in a classified facility.
• Possess a bachelor's degree or equivalent experience in Computer Science, Information Technology, or Cybersecurity related field.
• Skilled in crafting ATO packages using tools such as XACTA, LatteArt, ServiceNow, eMASS, or traditional methods.
• Strong working knowledge of NISPOM, JSIG, ICDs, RMF, and other policy requirements.
• Experience working with government sponsors through inspections and assessments.
• Proficient in security toolsets, including Splunk, LogRhythm, Tenable Security Center, and Ivanti.

Nice To Haves

• Have a Master's degree in Computer Science, Information Technology, Cybersecurity related field or 10 years of experience.
• Have worked in or directly supporting the Department of Defense, the IC Community or other U.S. government entities.
• Excellent verbal and written communication skills, with a strong understanding of customer focus.
• Up-to-date knowledge of emerging technologies and industry trends.

Responsibilities

• Work closely with Information Systems Security Managers (ISSMs), Program Managers, System Administrators, and Program Security Representatives (PSRs) to develop secure IT solutions for classified environments.
• Prepare documentation such as the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Risk Assessment Report (RAR), Security Traceability Matrix (SCTM), and other Body of Evidence (BoE) documents for security authorization packages.
• Capture and refine program compliance requirements to ensure information systems are secure and aligned with regulatory guidance.
• Conduct audits and analyze reports for anomalous activity, including unauthorized access and unapproved hardware/software.
• Provide reports and recommend actions after conducting preliminary reviews of security events.
• Participate in configuration management activities by conducting security impact analysis and due diligence reports for changes to information systems.

Benefits

• Disability insurance
• Health insurance
• Dental insurance
• Flexible spending account
• Paid time off
• Vision insurance
• Life insurance
• Retirement plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree