Information Systems Security Officer (ISSO)

Full Visibility

10d•Onsite

About The Position

Full Visibility is seeking an Information Systems Security Officer (ISSO) to work in Quantico, VA. The ISSO will work closely with customers to ensure the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs; infrastructure; application; Security Assessment and Authorization (SAA), IA policy directives (PD) and guides (PG); and IA Security tools, such as Tenable.io, Nessus Pro, NMap, etc. The candidate will coordinate with other ISSOs to ensure that their requirements for interconnection, policy, and procedures are met and all documentation is provided and updated as necessary. The ideal candidate will advise the customer on the use of methods such as encryption technology, vulnerability analysis, and security management standards to protect systems and applications to meet Federal Information Security Modernization Act (FISMA) requirements. The successful candidate will work with our federal clients to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from our clients and SMEs to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity and risk mitigation. Work with us as we protect our client's cyber infrastructure.

Requirements

Active Top Secret clearance with a polygraph.
HS diploma or GED and 9+ years of experience with information assurance or cybersecurity, OR Bachelor's degree in information systems technology, CS, or Computer Engineering and 5+ years of experience with information assurance or cybersecurity.
Experience supporting the development of security plans or packages for Assessment and Authorization (A&A) of IT systems Authority to Operate (ATO), including the implementation and assessment of cybersecurity controls.
Experience reviewing and addressing firewall logs such as Cisco Stealthwatch.
Experience with Security Technical Implementation Guides (STIGs).
Ability to relate requirements and document requirements within the appropriate security document or within the RMF system.
Ability to coordinate with the program, other systems, and security personnel.
Ability to create tactics, techniques, procedures, whitepapers, standard operating procedures, workflows, system data flows, and architectural diagrams.
Ability to analyze RMF policies.
Ability to work ONSITE in Quantico VA.

Nice To Haves

Experience with Xacta or JCAM
Experience reviewing NESSUS or ACAS vulnerability scans and reviewing audit logs, including STIGs and Information Assurance Vulnerability Alerts (IAVA)
Experience providing network or system administration or computer operations
Experience with Windows and Linux systems
Experience supporting the Intelligence Community
Knowledge of Windows and Linux OS, and cloud architecture and virtualization
Possession of excellent interpersonal and presentation skills
Possession of excellent verbal and written communication skills
CISSP, CISM, CAP, or CASP+ Certification

Responsibilities

Ensure the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs.
Coordinate with other ISSOs to ensure interconnection, policy, and procedure requirements are met and documentation is provided and updated.
Advise the customer on the use of methods such as encryption technology, vulnerability analysis, and security management standards to protect systems and applications to meet FISMA requirements.
Discover cyber risks, understand policies, and develop mitigation plans for federal clients.
Assess the entire threat landscape by gathering technical, environmental, and personnel details from clients and SMEs.
Guide clients through a plan of action with presentations, whitepapers, and milestones.
Translate security concepts for clients to enable informed decisions for securing mission-critical systems.
Protect client's cyber infrastructure.