Mid-Level Information System Security Officer (ISSO)

Integration Innovation, Inc.•Huntsville, AL

3d•Onsite

About The Position

i3 is seeking a Mid-Level Information System Security Officer (ISSO) to support the Risk Management Framework (RMF) lifecycle for a Software Defined Network (SDN) supporting PAE Fires and Reveille Forge. The selected candidate will perform day-to-day cybersecurity, RMF, vulnerability management, and continuous monitoring activities while coordinating with technical teams, external tenants, and cybersecurity leadership to maintain the system's authorization and security posture. This position is located in Huntsville, AL at Redstone Arsenal.

Requirements

Bachelor's degree in a related field; relevant experience may be substituted in lieu of a degree.
3–6 years of cybersecurity, ISSO, information assurance, or security analyst experience supporting a DoD RMF environment.
Current certification or qualification meeting applicable DoD 8140 requirements; Security+ or equivalent preferred.
Experience maintaining authorization packages and supporting ATO sustainment activities in eMASS.
Working knowledge of ACAS/Nessus, DISA STIGs, POA&Ms, NIST SP 800-53, DoD RMF, and CNSSI 1253.
Active DoD SECRET security clearance.
U.S. Citizenship required.
Strong communication skills and ability to coordinate cybersecurity requirements with technical teams, leadership, and external organizations.

Nice To Haves

Familiarity with security monitoring/SIEM technologies such as Elastic is preferred.
Knowledge of office administration and procedures.
Exceptional judgment capabilities and relationship management skills.
Excellent communication, teamwork, and client service skills; ability to clearly communicate in discussions and written documents, and to deliver feedback clearly and tactfully.
Interact with a diverse array of customers and staff in a professional and courteous manner.
Work independently with accountability for accurate and complete results.
Be extremely organized and exceptionally detail oriented.
Work well both independently and in a team environment.
Be energized by a fast-paced work environment.
Must be able to communicate with others effectively.
Analyze information and respond appropriately.
Manage time wisely and prioritize tasks.
Provide superior customer service.
Multi-task in a pleasant manner.
Work well under pressure.

Responsibilities

Support implementation and sustainment of the DoD Risk Management Framework (RMF) and system Authorization to Operate (ATO).
Maintain eMASS authorization packages, including ACAS/Nessus results, DISA STIG checklists, security controls, and supporting artifacts.
Develop, track, and maintain POA&Ms and coordinate remediation of identified vulnerabilities and compliance findings.
Review applicable USCYBERCOM Cyber Tasking Orders (CTOs), DISA vulnerability notifications, and other cybersecurity directives for system and tenant applicability.
Coordinate with external tenants and technical teams to communicate cybersecurity requirements, track remediation activities, and validate compliance.
Support risk assessments for new applications, hardware, system changes, external connections, and architecture enhancements.
Develop and maintain RMF documentation, including SSPs, RARs, continuous monitoring documentation, and interconnection agreements (ISAs/MOUs).
Monitor applicable Federal, DoD, and NIST cybersecurity guidance and support implementation of evolving requirements, including Zero Trust and Post-Quantum Cryptography (PQC).
Support cybersecurity assessments, inspections, configuration management activities, and other continuous monitoring requirements.