Information Systems Security Officer (ISSO)

CACI International•Aberdeen Proving Ground, MD

About The Position

Join a critical government program as an Information Systems Security Officer for the TITUS program. Contribute to the security and integrity of sensitive information systems at Aberdeen Proving Ground. Work with cutting-edge technologies and methodologies in cybersecurity and risk management. Collaborate with a team of skilled professionals in a dynamic, high-impact environment.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, or related field.
Minimum of seven years of related work experience in information security.
Active TS/SCI clearance.
DoD 8570 compliance.
Security+ Certification.
Demonstrated experience with NIST 800-53 controls and the RMF process.
Proficiency in using eMASS, ACAS, and vulnerability assessment tools.
Strong knowledge of NIST/ICD-503 and risk management methodologies.
Excellent communication, organizational, and leadership skills.
Experience with creating and maintaining POAMs, SCTMs, SSPs, and SOPs.

Nice To Haves

Additional DoD 8570 compliant IA certifications.
Experience with Cross Domain solutions.
Advanced degree in Cybersecurity or related field.
Familiarity with SCAP and STIG implementation.
Prior experience working on government programs or within DoD environments.

Responsibilities

Implement and maintain information security policies, procedures, and standards in compliance with DoD and NIST guidelines.
Conduct risk assessments and vulnerability scans to identify and mitigate potential security threats.
Develop, update, and maintain security documentation including POAMs, SCTMs, SSPs, and SOPs.
Ensure system compliance with NIST 800-53 controls and DoD 8570 requirements.
Manage the Risk Management Framework (RMF) process for assigned systems.
Utilize eMASS for security assessment and authorization activities.
Perform STIG and SCAP compliance checks and remediation.
Coordinate with cross-domain solutions teams as needed.
Provide security guidance and training to system users and administrators.
Monitor and respond to security incidents and events.
Maintain awareness of emerging cybersecurity threats and countermeasures.