Information Systems Security Office (ISSO)

TekSynap•Fort Belvoir, VA

10d•$110,000 - $130,000•Onsite

About The Position

TekSynap is seeking an Information Systems Security Officer (ISSO) to support its prime contract with the Defense Threat Reduction Agency. The position supports information assurance for NE-MA through Risk Management Framework activities, continuous monitoring, vulnerability management, security documentation, IT change management, and collaboration with IT staff. The role is based in Fort Belvoir, Virginia, in a professional office environment with a Monday–Friday schedule during core hours of 0800–1600. Travel is typically 1–2 weeks per year, with rare deployment occasions and training attendance. Applicants must be U.S. citizens and possess and maintain an active Top Secret security clearance with SCI eligibility. A BA/BS degree, DoD 8750 IAT Level II, and five to ten years of experience are required. The target salary range is $110,000–$130,000, subject to individual qualifications and contract and organizational requirements. Full-time employees are offered health, dental, and vision insurance, a 401(k), life insurance, short- and long-term disability plans, vacation time, and holidays. Employees must comply with vaccination requirements mandated by contract, law, or regulation.

Requirements

Minimum of five years of experience; the stated experience range is five to ten years.
BA/BS degree.
DoD 8750 IAT Level II qualification.
Must be a U.S. citizen.
Must possess and maintain an active Top Secret security clearance with SCI eligibility; the posting also describes the requirement as Top Secret clearance with the ability to obtain SCI.
Knowledge of NIST 800-37 Rev. 1 and NIST 800-53 Rev. 4.
Ability to meet the physical demands described, including regularly standing, walking, sitting, climbing or balancing, stooping, kneeling, crouching or crawling, and lifting up to 10 pounds; frequent lifting up to 25 and 50 pounds.
Ability to travel approximately 1–2 weeks annually, including rare deployment occasions and training attendance.

Responsibilities

Perform Risk Management Framework (RMF) Steps 1–3, including collecting system information, selecting required security controls, and implementing controls needed to achieve system authorization.
Support RMF Step 4 by participating in risk assessments and assisting with Plan of Action and Milestones (POA&M) remediation.
Perform continuous monitoring, produce security impact analyses, conduct operating-system security scans, review vulnerabilities, and create and manage POA&Ms in accordance with RMF.
Develop, deliver, and maintain security artifacts, including System Security Plans, POA&Ms, Risk Assessment Reports (RARs), Security Assessment Reports (SARs), and Security Impact Analyses (SIAs).
Work with IT staff to resolve POA&Ms in accordance with RMF, addressing high-risk vulnerabilities within 30 days, moderate-risk vulnerabilities within 60 days, and low-risk vulnerabilities within 90 days of discovery.
Attend meetings and collaborate with the team in support of NE-MA information assurance.
Assist with IT change management and provide information security recommendations.
Work with IT staff to develop and document IT security procedures aligned with DTRA security policies and DoD RMF.