Information System Security Officer

Booz Allen Hamilton • Usa, DC

3d

About The Position

The Information System Security Officer (ISSO) assesses and requests customer authorization for company-managed classified endpoints, servers, networks, and security appliances, applying evolving U.S. government cybersecurity policy and guidance. The ISSO ensures that system, network, and security-appliance auditing, virus scanning, and hardware and software configuration management are carried out as specified in customer-approved system assessment documentation and policy. The role also monitors program system administrators to ensure they follow relevant security procedures.

The ISSO documents clear compliance criteria and test cases for validating adherence to an evolving baseline of cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD. The position requires a TS/SCI clearance with polygraph.

Requirements

• Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
• Knowledge of the Risk Management Framework (RMF) and performing system assessment and authorization through a Governance, Risk, and Compliance (GRC) tool.
• Knowledge of risk mitigation and selecting and designing security controls for implementation.
• Knowledge of incident response and data loss prevention, detection, and response.
• Knowledge of NIST and Federal Information Security Management Act (FISMA) requirements for monitoring and reporting.
• TS/SCI clearance with a polygraph.
• High school diploma or GED.
• DoD 8570 IAM Level II Certification.

Nice To Haves

• Experience executing the analysis, design, and implementation of enterprise cybersecurity solutions.
• Experience maintaining vulnerability scanning tool compliance and patch management, including ensuring IT staff pushes patches to all systems, maintaining compliance with directives, managing system changes, and assessing the security impact of changes.
• Experience engineering and implementing security-based solutions to automate and improve the security posture of systems and supporting infrastructure.
• Excellent written and verbal communication skills.
• CISSP-ISSAP or CISSP-ISSEP Certification.

Responsibilities

• Assess company-managed classified endpoints, servers, networks, and security appliances and request customer authorization for them.
• Apply evolving U.S. government cybersecurity policy and guidance.
• Ensure system, network, and security-appliance auditing, virus scanning, and hardware and software configuration management requirements are executed according to customer-approved system assessment documentation and policy.
• Monitor program system administrators to ensure relevant security procedures are followed.
• Document compliance criteria and test cases to validate compliance with evolving cybersecurity requirements and guidance from NIST, the Intelligence Community, and the DoD.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Education Level: High school or GED