Isso

UIC Alaska•Ashburn, VA

2d•Hybrid

About The Position

Bowhead seeks an Information Systems Security Officer (ISSO) to join a dynamic team providing Technical Integration Management Support (TIMS) to the U.S. Customs and Border Protection (CBP) Passenger Systems Program Directorate (PSPD). The ISSO will be responsible for maintaining and protecting the security posture of mission-critical CBP applications. This role operates during core business hours (8:00 AM – 4:00 PM, Monday through Friday), primarily onsite in Ashburn, VA, with potential for telework at the Government's discretion. Success in this position requires mitigating security risks to the enterprise and ensuring all activities performed by PSPD application teams comply with federal security requirements. This includes meticulous documentation, tracking, and continuous monitoring of information systems in accordance with FISMA, DHS 4300A, and CBP 1400-05D policies. Close coordination with development teams, audit liaisons, and CBP CISO staff is crucial for this time-sensitive, schedule-driven work. A current and favorably adjudicated CBP suitability background investigation or an In-Scope DoW Top Secret clearance is required.

Requirements

Bachelor's degree in an IT-related field.
Minimum of eight (8) years of demonstrated experience in Information Systems Security, Information Assurance, or Cybersecurity supporting federal IT systems.
Deep knowledge of FISMA legislation, NIST 800-53 security controls, DISA Security Technical Implementation Guides (STIGs), and DHS/CBP security policies.
Experience utilizing enterprise risk management and security authorization tools (e.g., CSAM).
Proficiency with security scanning and monitoring tools utilized by CBP (e.g., Splunk, Nessus, Anchore, WebInspect, DBProtect, Qualys).
Outstanding communications skills—both written and oral—to effectively articulate complex cybersecurity risks to non-technical stakeholders and development teams.
Ability to work in a highly collaborative, schedule-driven Agile environment.
Candidates must hold a current and favorably adjudicated CBP suitability background investigation or an In-Scope DoW Top Secret clearance with the ability to obtain and maintain a favorably adjudicated CBP suitability background investigation within 45 days of hire.

Nice To Haves

Prior experience supporting U.S. Customs and Border Protection (CBP) or Department of Homeland Security (DHS) systems as an ISSO is preferred.
Active cybersecurity certifications such as CISSP, CISM, CAP, or Security+ CE is preferred.

Responsibilities

Serve as an experienced Information Systems Security Officer (ISSO) to maintain the security posture of PSPD applications.
Obtain and maintain access to the DHS Cyber Security Assessment and Management (CSAM) tool to document and manage all system security artifacts.
Develop, manage, and update critical security documentation including System Security Plans (SSP), Authority to Operate (ATO) packages, Interconnection Security Agreements (ISA), Privacy Impact Assessments (PIA), and Contingency Plans (CP).
Monitor system security posture by coordinating with the CBP Vulnerability Assessment Team (VAT) to perform regularly scheduled vulnerability scans.
Create Plans of Action and Milestones (POA&M) within CSAM for any identified security risks, provide remediation timeframes, and update statuses monthly.
Review all Change Requests (CRs) for security impacts prior to presentation to the Systems Engineering Governance Board (SEGB).
Review vulnerability scan reports and open Jira tickets to assign remediation tasks to application teams.
Follow the Agile process for all security-related work, participating in Sprint Planning, Sprint Reviews, and daily stand-up meetings.
Coordinate with the CBP Security Test and Evaluation (ST&E) team to support independent assessment activities and annual penetration testing.
Actively track and verify the manual installation and renewal of Public Key Infrastructure (PKI) certificates.
Review and approve/disapprove Technical Reference Model (TRM) requests for the use of new hardware and software.
Provide a monthly report of accomplishments and outstanding security issues to be briefed to PSPD Division Directors.
Other duties as assigned