Information Systems Security Officer (ISSO)

Parsons Corporation•Colorado Springs, CO

5d•$103,500 - $181,100•Onsite

About The Position

Parsons is seeking an Information Systems Security Officer (ISSO) for its Space Operations Program Directorate. The role focuses on cybersecurity aspects of system design to address cyber-related disruptions, minimize misuse and malicious behavior, and support Department of War agencies and Military Compartments efforts. The position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. The ISSO uses the Joint Special Access Program Implementation Guide (JSIG) and Risk Management Framework (RMF) to obtain and maintain authorizations for information systems, including on-premises and cloud platforms. The position supports continuous monitoring, security documentation, audits, system updates, and security impact analysis. The role is 100% onsite in Colorado Springs, Colorado, and requires an active Top Secret SCI security clearance.

Requirements

Knowledge of computer networking concepts and protocols, network security methodologies, risk management processes, IT security principles and methods, and network security architecture concepts.
Experience reviewing and implementing secure configuration management techniques.
Practical experience guiding systems through NIST SP 800-37 RMF steps from Prepare to Monitor, using CNSSI 1253 to determine confidentiality, integrity, and availability levels and the associated NIST SP 800-53 controls.
Experience with eMASS and Xacta.
Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or another relevant engineering field from an accredited university, with at least 8 years of experience; additional experience may be considered in lieu of a degree.
Active Top Secret SCI security clearance.
Willingness to submit to a counterintelligence polygraph to achieve SAP security clearance upon hire.
Possess a DoD 8140.03/8570.01 Information Assurance Manager II certification, such as CompTIA Security+, CISSP, CISM, CAP, or CASP+.
Knowledge of and hands-on experience with STIGs, ACAS, and HBSS/Trellix.
Ability to work in a dynamic environment and interact effectively with DoD, military and civilian personnel, and industry partners.
Working knowledge of Microsoft Word, PowerPoint, and Excel.
Ability to work 100% onsite in Colorado Springs, Colorado.

Nice To Haves

Knowledge of cyber tools such as Splunk, SIEM systems, vulnerability detection, scripting languages, and/or programming languages.
Knowledge of cloud computing platforms such as Amazon AWS and Microsoft Azure.
Knowledge of DevOps/DevSecOps operations and requirements.

Responsibilities

Use JSIG and RMF to achieve and maintain ATO, IATT, and ATC for existing and new information systems requiring accreditation, including on-premises and cloud platforms.
Develop and maintain System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Risk Assessment Reports (RARs), Continuous Monitoring Plans (ConMon), Security Assessment Reports (SARs), and Plans of Actions and Milestones (POA&Ms).
Produce and maintain documentation, policies, and procedures, including PPSM worksheets, system and network diagrams and descriptions, and SOPs.
Coordinate and perform security audits and system updates to identify nonstandard events and maintain system and information integrity.
Conduct continuous monitoring activities on accredited information systems and their operating environments, including developing and updating system artifacts.
Conduct security impact analysis for configuration management changes to authorization boundaries and provide the analysis to the ISSM.
Report cyber incidents or vulnerabilities to the ISSM and/or government chain of command.