Information System Security Officer (ISSO)

Sentar•Vienna, VA

About The Position

Sentar is seeking an Information System Security Officer in Virginia to support information system security and compliance in a 24/7 operational environment. The role identifies needed updates to security policies, standards, guidelines, and procedures; assesses and prioritizes risks and vulnerabilities; and develops and maintains incident response plans. The ISSO ensures compliance with FBI security regulations and standards and NIST controls, performs vulnerability and compliance scans, coordinates remediation with stakeholders, and implements and maintains security controls across information systems and networks. The position maintains security documentation for compliance and audits, participates in security governance and risk review activities, and reports the organization’s security posture, risks, incidents, compliance status, and remediation progress to management. It operates within the Risk Management Framework (RMF), including Steps 1–6, and supports continuous monitoring. The role also designs and validates security controls, configures and runs Nessus scans, incorporates findings into POA&Ms and risk analyses, and supports ATO packages and security documentation.

Requirements

TS/SCI clearance with CI Poly.
Bachelor’s degree or experience.
One of the following certifications: (C)ISSO, CISA, CISM, or CISSP.
Five years of ISSO experience.
Expertise in systems security requirements and policy.
Expertise in incident response and management.
Experience and knowledge with security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
Expertise in using threat monitoring platforms.
Experience and knowledge with security technologies, tools, and methodologies such as firewalls, IDS/IPS, and SIEM systems.
Experience and knowledge with network protocols and architecture.
Experience and knowledge with data encryption techniques and key management practices.
Experience and knowledge with compliance requirements, including FISMA.
Experience and knowledge with operating systems such as Windows and Linux and their security features.
Experience and knowledge with conducting and analyzing system scans.
Experience and knowledge with designing and implementing security internal policies, agency standards, and procedures.
Experience and knowledge with configuring and managing security tools and systems.

Responsibilities

Identify and recommend updates to security policies, standards, guidelines, and procedures to meet regulatory requirements and organizational objectives.
Conduct risk and vulnerability assessments to identify, evaluate, and prioritize information system security risks.
Develop, update, and maintain the security incident response plan, including detection, response, and recovery.
Ensure compliance with FBI security regulations and standards, following NIST controls.
Perform vulnerability and compliance scans to support auditing and monitoring.
Identify scan findings and coordinate with stakeholders to mitigate vulnerabilities and compliance issues.
Implement and maintain security controls across information systems and network environments.
Maintain security documentation, including policies, procedures, standards, configurations, and incident records, for compliance and auditing.
Participate in security governance activities, risk assessments, security reviews, and related meetings.
Report security posture, risks, incidents, compliance status, and remediation efforts to management.
Assist with other duties as assigned in the unit.
Operate within RMF Steps 1–6 and ensure ongoing compliance through continuous monitoring.
Design and implement security controls and validate their effectiveness.
Configure and execute Nessus scans, interpret results, and feed findings into POA&M and risk analysis processes.
Support ATO packages and security documentation.
Support a 24/7 operational environment.

Benefits

Voluntary medical, dental, and vision insurance, with health savings or flexible spending plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life insurance and short-term and long-term disability coverage for qualifying employees.
401(k) match.
PTO plan that increases with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Mental health awareness programs.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.