ISSO 1

Koniag Government Services, LLC•Washington, DC

4d•$105,000 - $115,000

About The Position

Koniag IT Systems, LLC, a Koniag Government Services company, is hiring an Information System Security Officer (ISSO) to support its cybersecurity efforts for the Department of Energy’s National Nuclear Security Administration (DOE NNSA). The position supports KITS and its government customer and is based in Las Vegas, Nevada; candidates in Washington, DC, Maryland, and New Mexico will also be considered. A Top Secret security clearance with Q eligibility is required. The ISSO manages system, application, and hardware authorization activities and ensures cybersecurity requirements are implemented. The role develops and maintains authorization documentation, applies the Risk Management Framework (RMF), supports initial authorization and reauthorization, and conducts continuous monitoring. The ISSO works within approved authorization boundaries, prepares packages for review by the ISSM and Authorizing Official (or designated representative), supports program requirements and quality standards, collaborates with other contractors, and mentors junior security personnel.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
1–3 years of experience in cybersecurity or information security.
At least 1 year of experience with RMF or similar security authorization frameworks.
Experience developing and maintaining security documentation, including ISSPs, risk assessments, and security baselines.
Experience working with federal agencies, preferably DOE, NNSA, or the Department of Defense.
Training that meets or is progressing toward NNSA and/or DoD 8140 requirements.
Strong knowledge of the NIST Risk Management Framework.
Understanding of federal cybersecurity regulations, policies, and standards.
Proficiency with security authorization documentation and processes.
Experience with risk assessment methodologies and practices.
Knowledge of security control implementation and assessment.
Strong project management skills and ability to manage multiple tasks simultaneously.
Excellent documentation skills and attention to detail.
Strong written and verbal communication skills.
Experience with continuous monitoring and ongoing authorization processes.
Knowledge of incident management and reporting requirements.
Understanding of NIST SP 800-53 security controls.
Ability to obtain and maintain the required security clearance; the listed clearance requirement is Top Secret / Q.
Experience with system security planning and documentation.
Knowledge of vulnerability management processes.
Ability to work collaboratively in team environments.

Nice To Haves

Certifications such as Security+, CISSP, CAP, or equivalent.
Experience with DOE NNSA cybersecurity requirements.
Experience with Archer or similar authorization management systems.
Knowledge of FISMA compliance requirements.
Experience with security testing and evaluation.
Familiarity with supply chain risk management.
Experience presenting cybersecurity concepts to management.
Knowledge of system hardening techniques and practices.
Experience with security architecture review.
Understanding of cloud security principles.
Experience with security incident handling.
Knowledge of secure coding practices.
Familiarity with privacy requirements and documentation.

Responsibilities

Manage and develop system, application, and hardware authorization documentation, including Information System Security Plans (ISSPs), risk assessments, and security baselines.
Complete initial authorization and reauthorization activities accurately and on time.
Develop authorization packages independently and submit them to the ISSM for review.
Prepare authorization packages for submission to the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR) for review and approval.
Apply RMF methodology consistently across assigned systems.
Maintain knowledge of AO-approved risk boundaries and risk tolerance levels.
Update authorization documentation on established schedules in alignment with risk management objectives.
Conduct continuous monitoring activities for assigned systems.
Track security control implementation and effectiveness.
Document system changes and assess their impact on security posture.
Ensure operations remain within established authorization boundaries and approved parameters.
Support transparent decision-making aligned with AO requirements.
Assist with contractor personnel onboarding and termination processes.
Ensure work products and deliverables meet Enterprise Cybersecurity Program requirements and quality standards.
Provide technical support at meetings, briefings, and presentations.
Collaborate with other contractors supporting NA-IM and NNSA.
Mentor junior security personnel in authorization processes and documentation.