Information Systems Security Officer

APOGEE RESEARCH LLC•Arlington, VA

21h•$114,133 - $171,200•Onsite

About The Position

Apogee Research seeks an experienced, organized Information Systems Security Officer (ISSO) to provide comprehensive information systems security support in executive-level DoD multi-level security environments. The ISSO is responsible for maintaining operational security for assigned information systems and requires working knowledge of secure government enterprise information systems and networks, isolated standalone networks, security policies, technical safeguards, and operational security measures. The position is based full-time in person at the company's Arlington, Virginia office. Candidates must hold an active DoD Top Secret clearance with SCI eligibility. The ISSO reports directly to the Director of Operations.

Requirements

3–5 years of experience as an ISSO or ISSE in an Intelligence or DoD environment.
Hold and maintain a DoD 8140/8570-approved baseline certification, such as Security+ or CySA+.
Experience auditing information systems.
Experience with certification and authorization requirements under NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev. 4/5, NIST SP 800-171, DoD STIG Overlays, and other U.S. Government information systems and security policies.
Self-starter who is highly motivated, can multitask, and can meet tight deadlines and manage changing priorities under pressure.
Excellent oral and written communication skills and ability to work well with others in a team environment.
Effective problem-solving skills and proven ability to cope with conflict, stress, and crisis situations.
Active DoD Top Secret clearance with SCI eligibility.
Full-time, in-person work at the Arlington, Virginia office.

Nice To Haves

Experience implementing security controls on Red Hat, other Linux distributions, and Windows operating systems in accordance with applicable STIGs and NIST 800-53 controls.
Knowledge and experience with technical and configuration standards for information systems security; experience configuring Windows Server operating systems, system virtualization, and related peripherals is preferred.
Experience developing security policies and procedures, such as data transfer, audit, media protection, and configuration management procedures.

Responsibilities

Ensure users follow information security policies and procedures for protecting, operating, maintaining, and disposing of systems and data in accordance with company policies and DoD regulations.
Interpret, review, and maintain System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Risk Assessment Reports, Security Control Assessment Reports, and authorizations in accordance with DoD policies.
Participate in and support assessments of classified and Controlled Unclassified Information networks.
Troubleshoot user accounts and network issues, perform backups, assist with Assured File Transfers, maintain security configuration integrity, and remove decommissioned information systems.
Identify information systems vulnerabilities and recommend or implement countermeasures for controlled and secure network resources.
Develop Risk Management Framework (RMF) packages, including SSPs, Enterprise Sub-System packages, Information Continuous Security Monitoring Plans, and Body of Evidence, in coordination with Program Managers, the ISSM, and Government Customer Security Control Accessors.
Review and analyze system audit logs to identify anomalous activity and potential threats.
Conduct and monitor cyber awareness and information systems training for company employees.
Perform security audits of assigned systems to validate proper use.
Keep information systems documentation current, including training records, user agreements, system baselines, and SSPs.
Coordinate with program stakeholders, the ISSM, CPSO/FSO, IT Manager, and team members to define, implement, and maintain an acceptable information systems security posture.
Support the ISSM in reporting, responding to, and investigating security violations and incidents.
Participate in and support incident response drills and the change configuration board.
Develop and maintain a Plan of Action and Milestones (POA&M) for security-related vulnerabilities and recommend corrections to the ISSM.