Information System Security Officer II

Targeted Solutions, LLC•Camp Springs, MD

About The Position

The Information System Security Officer (ISSO) II is responsible for maintaining the appropriate operational security posture of information systems and works closely with the ISSM and ISO. The role requires detailed knowledge and expertise in managing information-system security and may include responsibility for day-to-day security operations. Areas of responsibility include physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, and implements configuration management across authorization boundaries. The role assesses the security impact of configuration changes and makes recommendations to the ISSM. The primary function supports Department of Defense Special Access Programs (SAPs), including efforts for HQ Air Force, the Office of the Secretary of Defense, and military compartments. The position provides day-to-day support for Collateral, SCI, and SAP activities. The ISSO performs duties for in-house and external customers, supports authorization and self-inspection activities, identifies cybersecurity vulnerabilities, helps implement countermeasures, and reports on the status of security safeguards. The role requires a TS/SCI clearance, eligibility for access to SAP information, and willingness to submit to a counterintelligence polygraph. The employee must be able to regularly lift up to 50 pounds.

Requirements

Bachelor's degree or an associate degree in a related area plus two years of experience, or equivalent experience of four years.
Two to five years of related experience.
Experience developing RMF packages or bodies of evidence.
Prior experience in a role such as System/Network Administrator or ISSO.
SAP experience.
TS/SCI clearance.
Eligibility for access to Special Access Program Information.
Willingness to submit to a Counterintelligence polygraph.
Meet DoD Directive 8570.01-M certification requirements for Information Assurance Technician Level II or Information Assurance Manager II within six months of hire.
Ability to regularly lift up to 50 pounds.

Responsibilities

Develop physical or logical topologies for a system.
Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Coordinate changes or modifications to system hardware, software, or firmware with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Ensure information-system security documentation is current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties, such as operating-system, networking, and security-management training.
Execute the cybersecurity portion of the self-inspection and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analysis for configuration-management changes to authorization boundaries and provide the results to the ISSM.