Information System Security Officer
About The Position
Leidos Dynetics CIS Team, reporting through the Digital sector, is seeking an Information System Security Officer (ISSO) to support its Classified Information System Cybersecurity/Information Assurance Program. The ISSO reports to the Information System Security Manager (ISSM) on classified information system security compliance. All work will be performed onsite in Huntsville, Alabama. The role supports day-to-day compliance of classified information systems, including system assessments and monitoring, audits, security plan development, security education and awareness, and the integration of cybersecurity processes, procedures, and tools. The ISSO also helps investigate security violations, develop and maintain authorization documentation, review configuration management requests, support hardware sanitization and release, and test and inspect technical security controls. Candidates must hold an active Top Secret clearance and be able to obtain SCI eligibility and undergo a polygraph investigation after hire. A current DoD 8140/8570 IAT II certification, such as Security+ CE or an equivalent certification, is also required.
Requirements
- Bachelor of Science degree and at least 4 years of applicable, relevant experience in a computer-related discipline.
- Currently hold an active Top Secret clearance; must be able to obtain SCI clearance and undergo a polygraph investigation if hired.
- Current DoD 8140/8570 IAT II certification, such as Security+ CE or equivalent.
- Experience with security configurations across multiple operating systems and environments, including Windows, Linux, or UNIX, using tools such as Active Directory/Group Policy or Centrify.
- Highly organized and self-motivated, with excellent documentation skills and the ability to work with minimal supervision.
- Applicable experience may include cybersecurity, systems security or hardening, or information technology.
- Applicable experience may include compliance-based auditing using RMF, DAAPM, NISPOM, or JSIG.
- Applicable experience may include working with or supporting computer technologies such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting, or electronics.
- Applicable experience may include physical security, project or program management, office management, senior administration, or account management.
Nice To Haves
- Experience with IT, including Windows and Linux.
- Experience working in DoD classified operating or laboratory environments.
- Experience with information system security tools for vulnerability analysis and mitigation, such as Solarwinds, Tenable, or SCAP.
- Familiarity with implementing government directives and policies derived from NIST, STIG, DoD, or other government regulatory compliance standards in a professional industry.
- Experience executing Assessment and Authorization processes as defined within the Risk Management Framework.
- Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal or external customers and IT teams.
- Familiarity with executing and managing cyber incident response, including preservation, containment, and eradication.
Responsibilities
- Assess and monitor system compliance, conduct audits, develop security plans, and deliver information systems security education and awareness.
- Investigate information system security violations and help prepare reports specifying corrective and preventative actions.
- Conduct technical and administrative assessments.
- Integrate new cybersecurity processes, procedures, and tools.
- Support the creation, review, and updating of cybersecurity documentation and other technical writing.
- Audit information systems for compliance with security policies and procedures and report discrepancies to the ISSM, ISO, or FSO.
- Assist with the Risk Management Framework authorization process by developing and maintaining artifacts for the information system Body of Evidence.
- Review and approve, within delegated authority, Configuration Management requests and ensure associated hardware, software, and security-relevant functions are maintained and documented as part of the CCB approval process.
- Assist with sanitization and release of hardware in accordance with security policies or Authorizing Official guidance.
- Test, evaluate, and apply required technical security controls and conduct periodic inspections of information systems.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
