Information Systems Security Officer (ISSO)

PeopleTec•Colorado Springs, CO

6d•Hybrid

About The Position

PeopleTec is seeking an Information Systems Security Officer (ISSO) for an opportunity to support our Colorado Springs, CO and Los Angeles, CA locations. The Information Systems Security Officer (ISSO) is a mid-level cybersecurity professional responsible for the day-to-day implementation, monitoring, and documentation of cybersecurity requirements for United States Space Force information systems. Working under the direction of the Information Systems Security Manager (ISSM), the ISSO helps maintain the security posture and authorization status of assigned systems by supporting Risk Management Framework (RMF), continuous monitoring, vulnerability management, security configuration, and cybersecurity compliance activities. The successful candidate will work closely with system administrators, network engineers, ISSEs, system owners, and other technical personnel to ensure required security controls are implemented, documented, and maintained. The ISSO will monitor system security status, maintain RMF documentation and supporting evidence, track vulnerabilities and Plans of Action and Milestones (POA&Ms), support security assessments, and identify changes that may affect system security or authorization. This position requires a hands-on cybersecurity professional who can apply DoD cybersecurity requirements within operational information-system environments while working collaboratively to resolve findings and maintain mission capability.

Requirements

8-10 years of relevant experience in cybersecurity, information assurance, information systems security, system administration, RMF, or related technical disciplines.
DoD 8140 compliant certification appropriate to assigned cybersecurity responsibilities, such as Security+, CySA+, CASP+/SecurityX, and CISSP.
Experience supporting cybersecurity activities for DoD or other federal information systems.
Working knowledge of the DoD Risk Management Framework and system Assessment and Authorization processes.
Working knowledge of NIST SP 800-53 security controls.
Experience implementing, documenting, or maintaining cybersecurity security controls.
Experience developing or maintaining RMF and system security documentation.
Experience using eMASS or a comparable authorization/compliance system.
Experience identifying, documenting, tracking, and remediating cybersecurity vulnerabilities or compliance findings.
Experience developing or maintaining POA&Ms.
Experience supporting security configuration and system-hardening activities.
Familiarity with DISA STIGs and their application to enterprise information systems.
Experience working with system administrators, network engineers, or other technical personnel to resolve cybersecurity findings.
Ability to review technical and security information and identify potential cybersecurity risks or compliance issues.
Experience maintaining accurate cybersecurity documentation, records, and supporting evidence.
Ability to communicate cybersecurity issues effectively to technical personnel and security leadership.
Experience supporting classified DoD information systems.
Must be a U.S. Citizen
Current Top Secret clearance with SCI eligibility and SAP eligibility.

Nice To Haves

Experience serving as an ISSO or comparable cybersecurity professional within a DoD environment.
Experience supporting SCI and/or SAP information systems.
Familiarity with SAP-specific RMF and authorization processes.
Familiarity with the Joint Special Access Program Implementation Guide (JSIG).
Experience with NIST SP 800-171 and related DoD cybersecurity requirements.
Experience using vulnerability-scanning and security-configuration assessment tools.
Experience implementing or validating DISA STIG requirements.
Experience supporting continuous-monitoring programs.
Experience with Windows, Linux, Active Directory, networking, virtualization, or other enterprise technologies.
Experience reviewing system logs, security alerts, or SIEM information.
Experience supporting cybersecurity incident response or reporting.
Experience participating in security-control assessments, authorization reviews, inspections, or audits.
Experience supporting configuration-management or change-control processes.
CySA+, CASP+/SecurityX, CISSP, or other cybersecurity certification appropriate to the position.
RMF, eMASS, NIST, JSIG, or SAP cybersecurity training applicable to assigned responsibilities.
Technical certification related to Windows, Linux, networking, virtualization, cloud computing, or enterprise system administration.

Responsibilities

Perform day-to-day cybersecurity and information assurance activities for assigned DoD information systems.
Support implementation, documentation, and continuous monitoring of applicable RMF security controls.
Maintain RMF authorization documentation and supporting cybersecurity artifacts.
Update system security information, control implementation statements, evidence, and related documentation within eMASS or other approved systems.
Assist with development and maintenance of System Security Plans, security procedures, risk assessments, control traceability documentation, and other authorization artifacts.
Monitor assigned systems for cybersecurity compliance and changes affecting system security posture.
Review vulnerability scans, security configuration assessments, and other cybersecurity findings.
Work with system administrators and engineers to remediate vulnerabilities, configuration deficiencies, and security-control findings.
Develop, update, and track POA&Ms and coordinate corrective actions through closure.
Support implementation and validation of DISA STIGs and other applicable security configuration requirements.
Review system changes, software installations, hardware modifications, and configuration changes for potential cybersecurity impacts.
Maintain cybersecurity records, system inventories, authorization evidence, and other required security documentation.
Support security-control assessments, authorization activities, continuous-monitoring reviews, inspections, and audits.
Monitor system logs, security alerts, and other available security information and coordinate potential cybersecurity concerns with appropriate technical and security personnel.
Support cybersecurity incident identification, documentation, reporting, and response activities.
Verify that system users and privileged users comply with applicable cybersecurity requirements and access procedures.
Coordinate with system administrators, network engineers, ISSEs, and other technical personnel to resolve cybersecurity issues.
Identify cybersecurity risks or compliance concerns and elevate significant issues to the ISSM.
Support development and maintenance of local cybersecurity procedures and operating instructions.
Participate in cybersecurity working groups, technical reviews, configuration-control activities, and system engineering discussions as required.
Maintain awareness of applicable DoD cybersecurity policies and ensure assigned system documentation reflects current requirements.