Information System Security Officer

Booz Allen Hamilton•El Segundo, CA

2d•$62,000 - $141,000•Remote

About The Position

An ISSO is an individual responsible for ensuring the appropriate operational security posture is maintained for all systems assigned. Assist the ISSM in meeting their duties and responsibilities.

Requirements

Experience supporting collateral and special access program (SAP) environments and managing and safeguarding information systems in classified environments
Experience conducting security assessments, auditing, continuous monitoring, and implementing and maintaining RMF-based security controls
Knowledge of incident response processes and reporting requirements
Knowledge of information system hardening, secure configuration baselines, patch management, and security tools such as ACAS, HBSS, ESS, or SPLUNK
Knowledge of government security policies such as DoD 5200.01, ICDs, and CNSSI 1253 and NIST SP 800-53, DoD RMF, JSIG, and DAAG standards
Ability to apply security policies and procedures to ensure database and software security and analyze moderately complex security issues and develop practical solutions
TS/SCI clearance
Bachelor’s degree and 4+ years of experience with Information System Security or Master's degree and 2+ years of experience with Information System Security
DoD 8140 baseline Certification such as Security+ CE Certification

Nice To Haves

Experience reviewing and updating system security documentation such as SSPs, SCTMs, or POA&Ms
Ability to communicate effectively with technical and non‑technical stakeholders, work independently with moderate guidance, and assist junior personnel in understanding security requirements
Possession of sufficient technical competence commensurate with the complexity of the systems
CISSP or CAP Certification

Responsibilities

Ensuring systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan.
Verifying the implementation of delegated aspects of the system security program.
Ensuring all proper account management documentation is completed prior to adding and deleting system accounts.
Verifying all system security documentation is current and accessible to properly authorized individuals.
Conducting periodic assessments of authorized systems and providing the ISSM with corrective actions for all identified findings and vulnerabilities.
Ensuring audit records are collected and analyzed in accordance with the security plan.
Reporting all security-related incidents to the ISSM.
Monitoring system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
Formally notifying the ISSM of any changes to a system that could affect authorization.
Serving as a member of the Configuration Control Board (CCB), if designated by the ISSM.