Information System Security Officer (ISSO)
About The Position
Amentum is seeking an experienced Information System Security Officer (ISSO) in Spokane, WA in support of a Department of War (DoW) customer. In this role, you will ensure required cybersecurity measures are implemented across multiple DoW information systems. You will lead all efforts to establish and maintain Authority to Operate (ATO) approvals for standalone networks, collaborating with cybersecurity counterparts to maintain ATOs for shared Wide Area Networks (WANs). A successful candidate is a highly organized self-starter with strong attention to detail, capable of working independently with minimal supervision or as part of a collaborative, mission-focused team. The ISSO must be familiar with the National Institute of Standards and Technology (NIST) publications: SP 800-53v4, SP 800-53v5, SP 800-37, SP 800-30, 800-39, 800-137.
Requirements
- Must have an active Top Secret US Government security clearance with SCI eligibility. Note: US Citizenship is required to maintain a Top Secret Clearance.
- Must have and be current in at least one of the following certifications to meet DoD 8140 (formerly DoD 8570) for Intermediate ISSM (or IAM Level II): SecurityX/CASP+, CCSP, CCISO, CGRC/CAP, CISSO, Cloud+, GCSA, GSEC, Security+, or SSCP. A bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science can also meet the requirements. Meeting the requirements for Advanced ISSM (IAM III) will also meet the 8140 requirements for Intermediate ISSM.
- At least 2 years of previous experience as an ISSO/ISSM, System Administrator, or equivalent cybersecurity role.
- Direct hands-on experience developing, submitting, and processing Risk Management Framework (RMF) packages.
- Familiarity using any of the following security tools: Splunk, Tenable Nessus, Change Auditor, and Trellix ePolicy Orchestrator (ePO).
- Technical and professional writing expertise; high proficiency with MS Office products (Word, Excel, Visio, PowerPoint).
- Previous system administration experience, including familiarity with Windows and/or Linux operating systems, system configuration, account management, security settings, patching, and system hardening
Nice To Haves
- Bachelor’s degree in a Cybersecurity or IT-related field.
- At least 4 years’ previous experience as an ISSO/ISSM or another organizational equivalent.
- Active certification meeting DoD 8140 IAM Level III requirements (e.g., CISSP, CISM, or GSLC).
- Experience implementing and assessing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Responsibilities
- Monitor and maintain awareness of changes to DoW/DoD cybersecurity policies, assessing operational impacts and updating local policies accordingly.
- Review system security audit logs on standalone and networked systems to identify, investigate, and report anomalous activity.
- Manage all network account authorization, access requests, and required user paperwork for standalone networks and WANs within portfolio, ensuring strict compliance with the principle of least privilege.
- Utilize Tenable Nessus scanning tools to identify system vulnerabilities and assess STIG compliance. Partner with systems administration and IT teams to remediate and mitigate identified vulnerabilities.
- Provide required system cybersecurity and user awareness training to personnel.
- Perform annual RMF self-inspections and continuous monitoring assessments for all supported systems.
- Develop, update, and maintain Risk Management Framework (RMF) ATO packages and associated artifacts
- Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM/AO/AODR through established Configuration Control Boards (CCB).
- Ensure systems are operated, maintained, and disposed of in accordance with applicable DoW/DoD and local security policies and procedures.
- Support Information System Security Incident Response activities in accordance with DoW/DoD and local Incident Response Plans.
- Interface with, brief, and advise system stakeholders on all system security-related matters.
- Maintain the Plan of Action and Milestones (POA&M) to track, prioritize, and resolve system security weaknesses.
Benefits
- Medical, Dental, Vision, 401k.
- Paid time off (PTO) accrued weekly at 2.31 hours per week. Accruals are based on years of service.
- 11 Paid holidays.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
