Information System Security Officer

Bering Straits Native Corp•Colorado Springs, CO

8d•Onsite

About The Position

The Information System Security Officer (ISSO) implements and maintains cybersecurity and information assurance requirements for assigned information systems. The role supports Risk Management Framework (RMF) activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring. The ISSO maintains security documentation and helps ensure systems comply with Department of Defense, Federal, Intelligence Community, and organizational cybersecurity requirements. The position supports audits, vulnerability management, remediation, security reviews, incident investigations, authorization activities, access and configuration reviews, and continuous monitoring. It also provides cybersecurity guidance and training, coordinates with technical and government stakeholders, and maintains records, reports, metrics, and briefings. The position is based in Colorado Springs, Colorado, and is contingent upon contract award. It has no supervisory responsibilities. Work is primarily in government offices, data centers, SCIFs, secure facilities, and professional office environments, in classified and unclassified system environments. A standard full-time schedule applies; occasional extended hours may be required to support operational and mission needs. The role may support multiple systems, enclaves, or programs and may require access to classified information up to the Top Secret/SCI level. Applicants must pass a pre-employment drug screening and receive acceptable background-check results. Required clearances and military installation access must be obtained and maintained when applicable to the contract.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, Mathematics, or a related technical field; additional years of qualifying experience may substitute for education.
At least 3 years of experience supporting cybersecurity, information assurance, information security, systems administration, or related technical disciplines.
Experience supporting RMF compliance activities.
Experience maintaining cybersecurity documentation and authorization artifacts.
Experience implementing and assessing security controls on information systems.
Experience supporting vulnerability management and security compliance reviews.
Experience monitoring information systems for cybersecurity compliance and risk.
Must possess or be eligible to obtain and maintain a Secret security clearance; the posting also states the position may require access up to Top Secret/SCI and that applicable required clearance levels must be maintained.
Knowledge of information system operations and cybersecurity best practices.
Strong written and verbal communication skills; ability to manage multiple priorities and work independently with minimal supervision.
Working knowledge of NIST RMF processes and familiarity with NIST SP 800-53 security controls and DoD cybersecurity requirements.
Knowledge of information assurance and cybersecurity principles.
Understanding of Windows, Linux, virtualized environments, and enterprise network architectures.
Familiarity with vulnerability management tools and security assessment methodologies.
Knowledge of user account management, auditing, access controls, and configuration management practices.
Understanding of encryption, PKI, and identity management principles.
Ability to analyze vulnerabilities and recommend effective remediation actions.
Strong organizational, analytical, and problem-solving skills.
Proficiency with Microsoft Office Suite and cybersecurity management tools.
Knowledge of organizational procedures and workflows, relevant technologies or tools, customer service practices, data privacy and confidentiality, time management and prioritization, critical thinking, interpersonal and teamwork skills, and attention to detail.
Must maintain constant mental alertness and situational awareness.
Must be able to sit and work at a computer workstation for extended periods; review, analyze, and maintain cybersecurity documentation and technical records; communicate effectively in meetings, audits, inspections, and technical reviews; conduct physical inspections as required; lift up to 20 pounds occasionally; and travel to supported facilities and customer locations as required.
Must pass pre-employment drug screening and have acceptable background-check results; obtain and maintain applicable clearances and military installation access.

Nice To Haves

Active Secret, Top Secret, or TS/SCI security clearance.
Current DoD 8570/8140 certification such as Security+, CISSP, SSCP, CAP, CASP+, or equivalent.
Experience supporting Air Force, Space Force, Army, Navy, Intelligence Community, or other Federal Government organizations.
Experience supporting classified information systems and secure network environments.
Familiarity with eMASS, Xacta, ACAS, Nessus, Splunk, Microsoft Defender, or similar cybersecurity tools.
Experience supporting Special Access Programs (SAPs) or Sensitive Compartmented Information (SCI) systems.
Knowledge of cloud security concepts and environments, including Azure Government and AWS GovCloud.
Experience supporting continuous monitoring programs and cybersecurity inspections.
Prior experience as an ISSO, System Administrator, Cybersecurity Analyst, Information Assurance Analyst, or Security Specialist.
Familiarity with configuration management, change management, and incident response processes.

Responsibilities

Implement and maintain cybersecurity and information assurance requirements for assigned information systems.
Support RMF activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring.
Develop, maintain, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other cybersecurity documentation.
Ensure assigned systems comply with DoD, Federal, Intelligence Community, and organizational cybersecurity requirements.
Conduct security audits, compliance reviews, vulnerability assessments, and self-inspections; monitor security posture and identify risks, vulnerabilities, and compliance deficiencies.
Coordinate vulnerability remediation with system administrators, engineers, and cybersecurity personnel.
Review proposed hardware, software, and system configuration changes for security impacts.
Support ATO, ATC, IATT, and related accreditation activities.
Periodically review user accounts, privileged access, audit logs, system configurations, and security controls.
Investigate cybersecurity incidents, security violations, and suspicious activity; document findings and coordinate corrective actions.
Support continuous monitoring programs and ensure compliance with security scanning requirements.
Maintain inventory and configuration management records for assigned systems.
Provide cybersecurity training, awareness briefings, and guidance to system users and administrators.
Coordinate with ISSMs, ISSEs, Program Managers, and government stakeholders.
Maintain cybersecurity records and generate compliance reports, security metrics, and status briefings.