Information System Security Officer

Galapagos Federal Systems LLC.

11d•$110,000 - $120,000

About The Position

Galapagos Federal Systems, LLC is seeking an Information System Security Officer (ISSO) – Level II to join our team of skilled professionals supporting the U.S. Space Training and Readiness Command (STARCOM) at Patrick Space Force Base, Florida. The selected candidate will support the maintenance of the operational security posture for classified information systems. In this role, the ISSO will work closely with the Information System Security Manager (ISSM) and Information System Owner (ISO) to help ensure systems operate in compliance with applicable Department of Defense (DoD), Intelligence Community (IC), and Space Force cybersecurity policies and procedures. The ideal candidate will have practical experience supporting the day-to-day security operations of information systems, including assisting with security compliance, vulnerability management, and system authorization activities. The position supports systems operating within Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments and requires familiarity with security controls, continuous monitoring, and cybersecurity best practices.

Requirements

Active Top Secret clearance with SCI eligibility
5+ years of relevant DoD cybersecurity experience, including at least 2 years supporting SAP and/or SCI environments
Must consent to and successfully complete a Counterintelligence Scope Polygraph (CI Polygraph) if required by the position
Working knowledge of the Risk Management Framework (RMF) and experience supporting system authorization and continuous monitoring activities
Familiarity with DoD cybersecurity policies and procedures, including configuration management, vulnerability management, and audit review
Experience coordinating hardware, software, and firmware changes with the ISSM and appropriate authorizing officials prior to implementation
Experience with media handling procedures, including clearing, sanitizing, and destruction of hardware and storage media in accordance with approved security guidelines
Ability to analyze audit records, identify anomalies, and support incident response or remediation effort
Experience supporting cybersecurity inspections, system reviews, and compliance assessments
Strong organizational, analytical, and problem-solving skills
Excellent written and verbal communication skills with the ability to document findings and communicate security requirements effectively
Ability to work independently while collaborating with system administrators, engineers, and security personnel
Commitment to maintaining current knowledge through technical and cybersecurity training related to operating systems, networking, and security management
Bachelor of Arts (BA) or Bachelor of Science (BS) degree
Must obtain applicable DODM 8140 certifications as appropriate (industry standard is within 6-9 months of hiring)

Responsibilities

Conduct and support information system security operations, including physical and environmental protection, personnel security, incident response, and security awareness activities
Work closely with the Information System Security Manager (ISSM) and Information System Owner (ISO) to monitor information systems and their operating environments for compliance with security requirements
Assist with the development, maintenance, and update of system authorization documentation and ensure configuration management processes are followed within system authorization boundaries
Review configuration changes and assess potential security impacts, providing recommendations to the ISSM for risk mitigation
Support the design and maintenance of secure system architectures, including physical and logical system topologies
Identify cybersecurity vulnerabilities and assist with implementing countermeasures and remediation actions
Ensure information system security documentation remains accurate, current, and accessible to authorized personnel
Conduct periodic system reviews and support continuous monitoring activities to ensure compliance with approved authorization packages
Collect, review, and document audit logs and security events, identifying anomalies and reporting potential security issues
Assist with system recovery and restoration activities, verifying that security controls and safeguards are properly implemented after recovery
Support cybersecurity inspections, assessments, and self-inspection activities, including coordination of system assessment plans and documentation
Prepare reports and provide updates on the status of security controls and system compliance to the ISSM and program leadership