Information Systems Security Officer (ISSO)
About The Position
Radiance Technologies, a 100% employee-owned company, is seeking an Information Systems Security Officer to support cybersecurity operations for an organization within the US Army Space and Missile Defense Command Technical Center. The ISSO will help safeguard DoD Special Access Program (SAP) information systems, ensure cybersecurity compliance, and implement DoD Joint Special Access Program Implementation Guide (JSIG) policies and standards throughout system lifecycles. The position requires knowledge of cybersecurity principles and DoD cybersecurity documentation, as well as proactive risk management framework (RMF) support for secure system integration and sustainment. The ISSO’s primary duty is producing, developing, and maintaining security authorization documentation, including the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Security Assessment Plan, and other Security Authorization Package artifacts. The ISSO prepares and submits the complete package to the Authorizing Official (AO) through the Security Control Assessor (SCA).
Requirements
- Strong understanding of DoD cybersecurity regulations, standards, and tools.
- Experience with RMF, vulnerability management, system hardening, and secure coding practices.
- Working knowledge of Windows desktop, Windows Server, and Linux environments sufficient to understand configurations, security controls, vulnerabilities, and audit requirements.
- Experience using Splunk or similar SIEM tools for security auditing, log analysis, continuous monitoring, and identifying potential security events.
- Excellent communication and coordination skills across functional teams.
- Ability to assess, document, and mitigate cybersecurity risks in complex environments.
- U.S. citizenship and an active Top Secret/SCI clearance.
- Experience supporting SAP information systems, including working knowledge of JSIG Revision 4 and its application to system authorization and cybersecurity compliance.
- At least 5 years of experience supporting the full cybersecurity lifecycle for DoD systems.
- At least 5 years of progressively complex experience developing, integrating, and implementing cybersecurity and program protection standards for networks, computing environments, and application development.
- Possess a certification meeting DoD 8570 Information Assurance Technical Level II requirements: Security+ CE, SSCP, GSEC, or CCNA Security.
Nice To Haves
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
- Advanced certification meeting Information Assurance Technical Level III requirements, such as CASP+ CE, CCNP Security, CISA, CISSP or CISSP Associate, GCED, GCIH, or CCSP.
- Experience with ATO packages, RMF documentation, vulnerability assessments, and continuous monitoring.
- Familiarity with DoD cyber compliance tools such as ACAS, eMASS, and HBSS.
- Experience securing custom application development environments and with DevSecOps practices.
Responsibilities
- Produce, develop, and maintain security authorization documentation, including the SSP, POA&M, Security Assessment Plan, and other Security Authorization Package artifacts.
- Prepare and submit the complete authorization package to the Authorizing Official through the Security Control Assessor.
- Support Information Systems Security Managers (ISSMs) in executing cybersecurity responsibilities across assigned systems.
- Implement and enforce DoD cybersecurity policies and procedures for Information Systems and Platform IT systems.
- Verify users have appropriate security clearances and access authorizations and have received cybersecurity training before accessing DoD systems.
- Coordinate with ISSMs to initiate corrective actions or protective measures in response to cybersecurity incidents or vulnerabilities.
- Ensure proper reporting channels exist and are followed for cybersecurity threats and events.
- Maintain current cybersecurity documentation and make it accessible to authorized users.
- Review and analyze reports from penetration tests, static code analysis, and vulnerability scans.
- Analyze network architecture, data flows, organizational charts, and personnel assignments for potential cybersecurity vulnerabilities.
- Participate in continuous improvement of system security postures and help secure custom-developed applications.
- Perform other duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
