Information Systems Security Officer (ISSO)

Radiance Technologies•Huntsville, AL

About The Position

Radiance Technologies is seeking an Information Systems Security Officer to support cybersecurity operations for an organization within the US Army Space and Missile Defense Command Technical Center. The ISSO will help safeguard DoD Special Access Program (SAP) information systems, ensure cybersecurity compliance, and implement DoD Joint Special Access Program Implementation Guide (JSIG) policies and standards throughout system lifecycles. The role requires knowledge of cybersecurity principles, DoD cybersecurity documentation, and proactive risk management framework (RMF) practices to support secure system integration and sustainment. The ISSO will produce, develop, and maintain security authorization documentation, including the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Security Assessment Plan, and other artifacts required for the Security Authorization Package. The position prepares and submits the complete package to the Authorizing Official through the Security Control Assessor and supports Information Systems Security Managers in carrying out cybersecurity responsibilities across assigned systems. The role also implements and enforces DoD cybersecurity policies and procedures for Information Systems and Platform IT systems; supports user access and cybersecurity training requirements; coordinates incident and vulnerability response; maintains cybersecurity documentation; reviews security testing and vulnerability reports; and analyzes system architecture, data flows, and organizational information for potential vulnerabilities. The ISSO participates in continuous security improvement and helps secure custom-developed applications.

Requirements

U.S. citizenship and an active Top Secret/SCI clearance.
Experience supporting SAP information systems, including working knowledge of JSIG Revision 4 and its application to system authorization and cybersecurity compliance.
At least 5 years of experience supporting the full cybersecurity life cycle for DoD systems.
At least 5 years of progressively complex experience developing, integrating, and implementing cybersecurity and program protection standards for networks, computing environments, and application development.
A certification meeting DoD 8570 Information Assurance Technical Level II requirements, such as Security+ CE, SSCP, GSEC, or CCNA Security.
Strong understanding of DoD cybersecurity regulations, standards, and tools.
Experience with RMF, vulnerability management, system hardening, and secure coding practices.
Working knowledge of Windows desktop, Windows Server, and Linux environments sufficient to understand system configurations, security controls, vulnerabilities, and audit requirements.
Experience using Splunk or similar SIEM tools for security auditing, log analysis, continuous monitoring, and identifying potential security events.
Excellent communication and coordination skills across functional teams.
Ability to assess, document, and mitigate cybersecurity risks in complex environments.

Nice To Haves

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
Advanced certifications meeting Information Assurance Technical Level III requirements, such as CASP+ CE, CCNP Security, CISA, CISSP or CISSP Associate, GCED, GCIH, or CCSP.
Experience with ATO packages, RMF documentation, vulnerability assessments, and continuous monitoring.
Familiarity with DoD cyber compliance tools such as ACAS, eMASS, and HBSS.
Experience securing custom application development environments and applying DevSecOps practices.

Responsibilities

Produce, develop, and maintain security authorization documentation, including the SSP, POA&M, Security Assessment Plan, and other Security Authorization Package artifacts.
Prepare and submit the complete Security Authorization Package to the Authorizing Official through the Security Control Assessor.
Support Information Systems Security Managers in executing cybersecurity responsibilities across assigned systems.
Implement and enforce DoD cybersecurity policies and procedures for Information Systems and Platform IT systems.
Verify that users have appropriate security clearances and access authorizations and have completed cybersecurity responsibilities training before accessing DoD systems.
Coordinate with ISSMs to initiate corrective actions or protective measures in response to cybersecurity incidents or vulnerabilities.
Ensure proper reporting channels exist and are followed for cybersecurity threats and events.
Maintain current cybersecurity documentation and ensure it is accessible to authorized users.
Review and analyze reports from penetration tests, static code analysis, and vulnerability scans.
Analyze network architecture, data flows, organizational charts, and personnel assignments for potential cybersecurity vulnerabilities.
Participate in continuous improvement of system security postures and assist in securing custom-developed applications.
Perform other duties as assigned.