Information Systems Security Officer (ISSO) II - Washington, DC area

General Dynamics Information Technology•Washington, DC

12d•$106,275 - $143,783•Onsite

About The Position

The ISSO is responsible for maintaining the appropriate operational security posture of information systems and works closely with the ISSM and ISO. The role requires detailed knowledge and expertise to manage information-system security and may include responsibility for day-to-day security operations. Duties also cover physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO coordinates with the ISSM and ISO to monitor information systems and their operating environments, develop and update authorization documentation, and implement configuration management across authorization boundaries. The role includes assessing the security impact of changes and making recommendations to the ISSM. The position primarily supports Department of Defense agencies and Special Access Programs (SAPs), including HQ Air Force, the Office of the Secretary of Defense, and Military Compartments efforts. It provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities. The position is onsite in Washington, DC, with 40 scheduled hours per week and 10–25% travel required.

Requirements

Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance; must be able to attain TS/SCI with a CI polygraph.
U.S. citizenship.
Special Access Program (SAP) experience.
Experience in roles such as System Administrator, Network Administrator, or ISSO.
Related experience and education meeting one of these paths: 6 or more years of related experience; 2 or more years of related experience and a bachelor's degree; an associate degree in a related area and 2 years of experience; or equivalent experience (4 years).
IAT Level II or IAM Level II certification (examples include Security+ CE or CCNA Security), to be obtained within 6 months.

Responsibilities

Develop physical or logical topologies for a system.
Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Coordinate system hardware, software, or firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Ensure information-system security documentation is current and accessible to appropriately authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspections, including security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analyses for configuration-management changes to authorization boundaries and provide results to the ISSM.