Information Systems Security Officer 1

Columbia Technology Partners•Annapolis Junction, MD

About The Position

Columbia Technology Partners is seeking an Information Systems Security Officer 1 to support the execution and maintenance of information assurance programs across systems, enclaves, and organizational environments. The role focuses on implementing security policies, maintaining operational security posture, and supporting risk management and compliance activities. The ISSO will assist with day-to-day security operations, documentation, and system authorization efforts, working closely with ISSMs, system administrators, and engineering teams to ensure security requirements are met. The position requires familiarity with the Risk Management Framework (RMF), system authorization processes, and continuous monitoring, as well as experience supporting compliance and vulnerability management. Applicants must be U.S. citizens and hold an active security clearance with an appropriate polygraph. Employment is contingent upon successful completion of a security background investigation and polygraph. Applicants and employees are subject to random drug testing in accordance with Executive Order 12564.

Requirements

Bachelor's degree in Computer Science or a related field, or four additional years of ISSO experience as a substitute.
At least five years of experience as an ISSO or in a related role.
DoD 8570 IAT Level I certification or higher.
Experience with RMF processes, including ATO support, security controls, and continuous monitoring.
Hands-on experience with RMF tools, NIST 800-53/800-37, vulnerability scanning, and security documentation such as SSPs and POA&Ms.
U.S. citizenship.
Active security clearance with appropriate polygraph.

Responsibilities

Support implementation and enforcement of information systems security policies, standards, and methodologies.
Help maintain the operational security posture of systems and programs.
Perform vulnerability and risk assessments to support system authorization activities.
Support RMF-based security authorization efforts, including ATO maintenance and continuous monitoring.
Prepare and maintain security documentation, including SSPs, POA&Ms, BIAs, CMPs, AARs, CPs, SARs, and RARs.
Manage and assess the security impact of system changes.
Perform configuration management for security-related software, hardware, and firmware.
Evaluate security solutions for compliance with NIST security requirements.
Analyze compliance and configuration scan results and support remediation efforts.
Collaborate with system administrators and system owners to maintain compliance and address vulnerabilities.
Support privileged user access oversight and account management processes.
Maintain system records, including hardware, software, and network components.
Support ISSMs and senior security staff in day-to-day security operations.

Benefits

Three medical plans with in-network and out-of-network options.
Vision insurance, paid in full by the company.
Dental insurance, paid in full by the company.
401(k) with a 6% company contribution.
Paid time off with customizable leave plans.
Jury duty, bereavement, and military leave.
Up to $10,000 for approved career-related learning, training, education, and/or tuition.
Life and AD&D insurance at no cost to the employee.
Short-term and long-term disability insurance at no cost to the employee.
Year-end profit-sharing bonus.
Tiered employee referral bonus program, with bonuses ranging from $7,000 to $20,000 if a referral joins the team.