Information System Security Officer - Classified Systems

Leidos•Huntsville, AL

1d•$69,550 - $125,725•Hybrid

About The Position

Leidos Dynetics, reporting through the Digital Sector, is seeking an Information System Security Officer (ISSO) to support classified information systems and cybersecurity operations in Huntsville, Alabama. In this role, you will support the day-to-day cybersecurity compliance and continuous monitoring of classified information systems operating within a DCSA regulated environment. Working under the direction of the Information System Security Manager (ISSM) and in collaboration with other cybersecurity professionals, system administrators, engineers, and program personnel, you will assist in maintaining system authorizations and ensuring continued compliance with applicable cybersecurity requirements. This position provides an opportunity to develop hands-on experience across the Risk Management Framework (RMF) lifecycle while supporting technical security assessments, system hardening, vulnerability management, configuration management, security documentation, and DCSA assessment activities.

Requirements

Bachelor’s degree with 2+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience. Additional relevant experience may be considered in lieu of a degree.
Must meet, or be capable of meeting, applicable DoD 8140/DoD Cyber Workforce Framework (DCWF) qualification requirements for the assigned work role through approved certification, education, training, or experience.
Familiarity with the RMF and cybersecurity control implementation, assessment, or compliance activities.
Demonstrate direct experience and/or knowledge in one or more of the following areas: cybersecurity, information systems security, system administration, system hardening, vulnerability management, security configuration management, or compliance auditing.
Working knowledge of Windows and/or Linux operating systems and associated security concepts and configurations.
Familiarity with cybersecurity requirements and standards such as NIST SP 800-53 Rev 5, DISA STIGs, DCSA requirements, the DAAG, NISPOM, or comparable government cybersecurity requirements.
Ability to review technical security findings, document deficiencies, and assist with development and validation of corrective actions.
Ability to develop and maintain detailed cybersecurity documentation and objective evidence supporting information system compliance.
Strong organizational, analytical, written, and verbal communication skills with the ability to manage assigned cybersecurity activities and priorities.
Ability to work collaboratively with Information Technology, system administrators, engineers, program personnel, physical security, and other cybersecurity professionals

Nice To Haves

Experience supporting DoD or DCSA-regulated classified information systems.
Familiarity with the RMF authorization and continuous monitoring lifecycle and development or maintenance of authorization artifacts within eMASS.
Experience performing or supporting STIG, SCAP, vulnerability, and security configuration compliance assessments.
Familiarity with cybersecurity and monitoring tools such as Splunk, Trellix, Tenable/ACAS, SCAP, STIG Viewer, or comparable technologies.
Experience supporting Windows and/or Linux environments, including Active Directory, Group Policy, identity management, or privileged-access management technologies.
Familiarity with DCSA assessments, authorization activities, inspections, or cybersecurity readiness reviews.
Experience reviewing cybersecurity findings and supporting remediation activities with system administrators, engineers, or other technical personnel.
Familiarity with cybersecurity incident response activities, including identification, preservation, containment, eradication, recovery, and reporting.
Industry cybersecurity certifications such as Security+, CySA+, CISSP, CISM, CISA, GCIH, or other certifications relevant to the assigned DoD 8140/DCWF work role.

Responsibilities

Support the day-to-day cybersecurity oversight and compliance of classified information systems and assist with maintenance of system authorizations.
Perform security monitoring and compliance reviews of classified information systems and report identified deficiencies, risks, and noncompliance to the ISSM or designated cybersecurity lead.
Support the RMF lifecycle by developing, reviewing, and maintaining authorization artifacts and objective evidence within the system Body of Evidence (BoE).
Assist with implementation, assessment, and continuous monitoring of applicable security controls in accordance with approved system security plans and established cybersecurity procedures.
Perform technical security assessments, including STIG, SCAP, vulnerability scanning, and system configuration reviews.
Document security findings and vulnerabilities and work with cybersecurity personnel, system administrators, and engineering teams to support remediation and validation activities.
Review Configuration Management requests within delegated authority for hardware, software, system configuration, and security-relevant changes, ensuring changes are properly documented and processed through the Configuration Control Board (CCB).
Support periodic technical and administrative assessments of information systems to validate continued compliance with approved security requirements, procedures, and system configurations.
Review security-relevant audit information and system logs using available operating system, security monitoring, and SIEM tools.
Support cybersecurity incident response activities, including investigation, documentation, evidence preservation, containment, corrective actions, and reporting under the direction of the ISSM or designated cybersecurity lead.
Develop, review, and maintain cybersecurity documentation, procedures, assessment artifacts, system records, and other technical documentation.
Provide cybersecurity guidance and security awareness support to system users, administrators, engineers, and program personnel within established policies and procedures.
Support DCSA assessments, security reviews, inspections, authorization activities, and other internal or external cybersecurity assessments.
Collaborate with Information Technology, system administrators, engineers, program management, physical security, and other cybersecurity personnel to identify and resolve information system security issues.