Information Systems Security Officer(ISSO)

Leidos•Laurel, MD

3d•$107,900 - $195,050•Onsite

About The Position

Leidos is seeking an experienced Information Systems Security Officer (ISSO) to support critical national-security missions within their Cyber & Analytics Business Area, Key Management & Analytics Division. The role involves protecting systems and information through information assurance, security operations, system accreditation, configuration management, and maintaining the security posture of mission-critical information systems. This is a full-time, on-site position in a secure mission environment, with no remote work availability due to security requirements. The ISSO will work with ISSMs, senior ISSOs, system administrators, engineers, and mission teams to ensure systems are secure, compliant, documented, and mission-ready. The position offers the chance to apply cybersecurity expertise to work that directly supports national security.

Requirements

Demonstrated Information Systems Security Officer experience supporting programs and contracts of comparable scope, type, and complexity.
Bachelor's degree in Computer Science or a related discipline from an accredited college or university, or 4 years of direct experience as an ISSO in lieu of a degree.
Ten (10) years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Experience in at least two (2) of the following areas: Current security tools, Hardware/software security implementation, Communication protocols, Encryption techniques and tools.
DoD 8570 Information Assurance Management (IAM) Level I certification or higher.
Demonstrated experience with information-system security policies, standards, methodologies, security documentation, and day-to-day security operations.
Experience assessing system changes and their potential security impact.
Experience supporting security authorization, certification and accreditation, and information-assurance activities.
Active TS/SCI clearance with Polygraph.
Ability to work full-time on site in a secure environment.

Responsibilities

Maintain the operational security posture of information systems and programs.
Ensure applicable security policies, standards, and methodologies are implemented and followed.
Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies.
Plan and coordinate IT security programs and policies.
Help develop system security policies that ensure compliance.
Support the Information System Security Manager (ISSM) in maintaining the appropriate operational Information Assurance (IA) posture for systems, programs, and enclaves.
Evaluate security solutions to ensure they meet requirements for processing classified information.
Perform vulnerability and risk-assessment analysis in support of certification and accreditation activities.
Develop, maintain, and update security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, System Requirements Traceability Matrices (SRTMs), and other required IA documentation.
Develop and maintain C&A documentation in accordance with applicable ODNI and DoD policies and support obtaining C&A for information systems.
Support security-authorization activities in accordance with the National Institute of Standards and Technology Risk Management Framework (NIST RMF).
Manage and control system changes, evaluate their security impact, and provide Configuration Management (CM) for security-relevant information-system software, hardware, and firmware.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other system components, including system upgrades.
Support day-to-day security operations.
Administer user identification and authentication mechanisms for Information Systems.
Support customer transition to ServiceNow (SNOW).
Serve as the Approval Authority for Information Systems under your control, as required by the program.