Information System Security Officer - Classified Systems

Leidos•Huntsville, AL

13d•$69,550 - $125,725•Onsite

About The Position

Leidos Dynetics is seeking an Information System Security Officer (ISSO) to support classified information systems and cybersecurity operations in Huntsville, Alabama. The role supports day-to-day cybersecurity compliance and continuous monitoring of classified information systems in a DCSA-regulated environment. The ISSO works under the direction of the Information System Security Manager (ISSM) and collaborates with cybersecurity professionals, system administrators, engineers, and program personnel to maintain system authorizations and continued compliance with applicable cybersecurity requirements. The position offers hands-on experience across the Risk Management Framework (RMF) lifecycle, including technical security assessments, system hardening, vulnerability and configuration management, security documentation, and DCSA assessment activities. Work is performed onsite at the Huntsville office, with up to 20% telework potentially allowable. Candidates must currently hold an active Secret clearance and be able to obtain a Top Secret clearance following hire.

Requirements

Bachelor’s degree and at least 2 years of relevant cybersecurity, information technology, information assurance, or information systems security experience; additional relevant experience may be considered in lieu of a degree consistent with Leidos job-level requirements.
Must possess one or more industry certifications aligned with the applicable DoD 8140/DoD Cyber Workforce Framework (DCWF) work role, such as CompTIA Security+ or CySA+, or be able to otherwise satisfy DoD 8140 qualification requirements through approved education, training, or experience.
Familiarity with RMF and cybersecurity control implementation, assessment, or compliance activities.
Experience or demonstrated knowledge in one or more of cybersecurity, information systems security, system administration, system hardening, vulnerability management, security configuration management, or compliance auditing.
Working knowledge of Windows and/or Linux operating systems and associated security concepts and configurations.
Familiarity with cybersecurity requirements and standards such as NIST SP 800-53 Rev 5, DISA STIGs, DCSA requirements, the DAAG, NISPOM, or comparable government cybersecurity requirements.
Ability to review technical security findings, document deficiencies, and assist in developing and validating corrective actions.
Ability to develop and maintain detailed cybersecurity documentation and objective evidence supporting information system compliance.
Strong organizational, analytical, written, and verbal communication skills, including the ability to manage assigned cybersecurity activities and priorities.
Ability to collaborate with Information Technology, system administrators, engineers, program personnel, physical security, and other cybersecurity professionals.
Must currently hold an active Secret clearance and be able to obtain Top Secret clearance following hire.

Nice To Haves

Experience supporting DoD or DCSA-regulated classified information systems.
Familiarity with the RMF authorization and continuous monitoring lifecycle and development or maintenance of authorization artifacts within eMASS.
Experience performing or supporting STIG, SCAP, vulnerability, and security configuration compliance assessments.
Familiarity with cybersecurity and monitoring tools such as Splunk, Trellix, Tenable/ACAS, SCAP, STIG Viewer, or comparable technologies.
Experience supporting Windows and/or Linux environments, including Active Directory, Group Policy, identity management, or privileged-access management technologies.
Familiarity with DCSA assessments, authorization activities, inspections, or cybersecurity readiness reviews.
Experience reviewing cybersecurity findings and supporting remediation with system administrators, engineers, or other technical personnel.
Familiarity with cybersecurity incident response activities, including identification, preservation, containment, eradication, recovery, and reporting.
Industry cybersecurity certifications such as Security+, CySA+, CISSP, CISM, CISA, GCIH, or other certifications relevant to the assigned DoD 8140/DCWF work role.
Relevant experience in cybersecurity, information assurance, information systems security, system administration, system hardening, or Information Technology; RMF compliance, security control implementation or assessment, continuous monitoring, authorization package support; Windows, Linux, Active Directory, Group Policy, Delinea, or comparable enterprise technologies; STIG, SCAP, vulnerability scanning, security configuration assessment, audit log analysis, security monitoring; or technical support of classified systems, laboratories, engineering environments, or other regulated computing environments.

Responsibilities

Perform security monitoring and compliance reviews of classified information systems and report deficiencies, risks, and noncompliance to the ISSM or designated cybersecurity lead.
Support the RMF lifecycle by developing, reviewing, and maintaining authorization artifacts and objective evidence within the system Body of Evidence (BoE).
Assist with implementation, assessment, and continuous monitoring of security controls in accordance with approved system security plans and cybersecurity procedures.
Perform technical security assessments, including STIG, SCAP, vulnerability scanning, and system configuration reviews.
Document security findings and vulnerabilities and coordinate with cybersecurity personnel, system administrators, and engineering teams on remediation and validation.
Review Configuration Management requests within delegated authority for hardware, software, system configuration, and security-relevant changes; ensure changes are documented and processed through the Configuration Control Board (CCB).
Support periodic technical and administrative assessments to validate continued compliance with approved security requirements, procedures, and system configurations.
Review security-relevant audit information and system logs using operating-system, security-monitoring, and SIEM tools.
Support cybersecurity incident response, including investigation, documentation, evidence preservation, containment, corrective actions, and reporting under the direction of the ISSM or designated cybersecurity lead.
Develop, review, and maintain cybersecurity documentation, procedures, assessment artifacts, system records, and other technical documentation.
Provide cybersecurity guidance and security-awareness support to system users, administrators, engineers, and program personnel within established policies and procedures.
Support DCSA assessments, security reviews, inspections, authorization activities, and other internal or external cybersecurity assessments.
Collaborate with Information Technology, system administrators, engineers, program management, physical security, and cybersecurity personnel to identify and resolve information system security issues.