Information Security Support Officer (ISSO)

Decision Technologies, Inc.•Virginia Beach, VA

13d•$91,000 - $105,000•Onsite

About The Position

Decision Technologies seeks a qualified Information Security Support Officer (ISSO) to join our team in Virginia Beach, VA. The Information System Security Officer (ISSO) provides cybersecurity leadership, security compliance oversight, and technical security expertise in support of a Government In-Service Engineering Activity (ISEA) for United States Marine Corps (USMC) programs. The ISSO is responsible for ensuring assigned information systems meet Department of War (DoW), Department of the Navy (DoN), and USMC cybersecurity requirements and maintain full compliance throughout the system lifecycle. This role requires close collaboration with the government customer, program managers, engineering teams, and system administrators. MUST HAVE an active Secret security clearance.

Requirements

U.S. Citizen with the ability to obtain and maintain a DoD Secret clearance (current clearance preferred).
Bachelor’s degree in Cybersecurity, Information Technology, or related field; equivalent experience may be considered.
DoD 8570/8140 IAT or IAM Level II certification (e.g., Security+, CCNA Security, CySA+, CAP, GSLC).
Demonstrated experience with DoD or Navy RMF processes and NIST SP 800-53 security controls.
Familiarity with ACAS, HBSS/ESS, vulnerability management, and secure configuration standards.
Experience supporting government customers, ideally within the USMC or Naval enterprise.
Strong communication skills and ability to work effectively with cross-functional teams.

Nice To Haves

Experience with DoN Enterprise Mission Assurance Support Service (eMASS).
Experience supporting an ISEA or similar government engineering activity.
Knowledge of USMC-specific cybersecurity directives, networks, and program processes.
Familiarity with Secure Network Infrastructure (SNI), DON Application and Database Management System (DADMS), and system accreditation requirements at various classification levels.
Experience supporting system lifecycle cybersecurity from design to sustainment.

Responsibilities

Serve as the cybersecurity lead and primary security point of contact for assigned USMC systems supported by the ISEA.
Develop, maintain, and manage system Accreditation documentation (e.g., RMF package, SSP, SCTM, POA&M).
Oversee and support the implementation of Risk Management Framework (RMF) activities from categorization through continuous monitoring.
Conduct reviews of system security controls and provide recommendations to ensure compliance with applicable DoW, DoN, and USMC policies.
Coordinate vulnerability scanning, review scan results, and track remediation activities.
Support configuration management processes and ensure cybersecurity considerations are incorporated into engineering changes.
Assist system administrators and engineering teams with implementing secure configurations and cybersecurity best practices.
Monitor system security posture, implement continuous monitoring activities, and maintain audit-ready documentation.
Prepare for and support cybersecurity inspections, assessments, and audits conducted by government authorities.
Ensure proper handling, storage, and transmission of classified and unclassified information.
Provide cybersecurity guidance, training, and awareness to program stakeholders.
Interface directly with the customer (ISEA and USMC representatives) to report cybersecurity status, risks, and POA&M progress.