Isso 1-Ffll-8964

Onyx Point•Hanover, MD

About The Position

The ISSO supports an information assurance program for a program, organization, system, or enclave. The role helps propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies, and maintains the operational security posture of information systems to ensure policies, standards, and procedures are established and followed. The ISSO manages day-to-day security operations and security aspects of information systems, evaluates security solutions for processing classified information, and assesses vulnerabilities, risks, and the security impact of system changes. The role provides configuration management for security-relevant software, hardware, and firmware; administers user identification and authentication; and maintains records of system components and upgrades. The position prepares and maintains security documentation, including System Security Plans (SSPs), risk assessments, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). It supports system security authorization in accordance with the NIST Risk Management Framework (RMF) and ODNI and DoD policies, and provides support to senior ISSOs and the Information System Security Manager (ISSM). The role uses Splunk to monitor security events, analyze logs, and support incident response. An active TS/SCI with Full Scope Polygraph security clearance and U.S. citizenship are required. The annual salary range is $78,000 to $250,000; actual compensation depends on work location, role, skill set, and expertise.

Requirements

Active TS/SCI security clearance with Full Scope Polygraph.
U.S. citizenship.
Five years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Experience in at least one of the following areas: current security tools; hardware/software security implementation; communication protocols; or encryption techniques/tools.
Bachelor’s degree in Computer Science or a related discipline from an accredited college or university, or four additional years of ISSO experience in lieu of the degree.
DoD 8570 compliance with IAT Level I or higher.

Responsibilities

Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies.
Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Maintain the operational security posture of an information system or program and ensure security policies, standards, and procedures are followed.
Support the ISSM in maintaining the appropriate operational information assurance posture for a system, program, or enclave.
Manage security aspects of information systems and perform day-to-day system security operations.
Evaluate security solutions to ensure they meet requirements for processing classified information.
Perform vulnerability and risk assessment analysis to support certification and accreditation.
Provide configuration management for information system security software, hardware, and firmware; manage system changes and assess their security impact.
Maintain records of workstations, servers, routers, firewalls, intelligent hubs, network switches, and system upgrades.
Prepare, review, develop, and maintain System Security Plans, risk assessment reports, C&A packages, SRTMs, and other information assurance documentation.
Support security authorization activities in compliance with the NIST Risk Management Framework and applicable ODNI and DoD policies.
Administer the information system’s user identification and authentication mechanism.
Use Splunk to monitor security events, analyze logs, and support incident response.