Information Systems Security Officer(ISSO)

Leidos•Laurel, MD

7d•$107,900 - $195,050•Onsite

About The Position

Leidos has an exciting opportunity for an experienced Information Systems Security Officer (ISSO) to join our Cyber & Analytics Business Area, Key Management & Analytics Division, supporting critical national-security missions. You'll help protect the systems and information our customers depend on—supporting information assurance, security operations, system accreditation, configuration management, and the security posture of mission-critical information systems. Working alongside ISSMs, senior ISSOs, system administrators, engineers, and mission teams, you'll help ensure systems remain secure, compliant, documented, and ready to support the mission. This is a full-time, on-site position in a secure mission environment. Due to the nature of the work and security requirements, remote work is not available for this position. If you have deep information-assurance and cybersecurity experience and want to apply that expertise to work that directly supports national security, we'd like to talk.

Requirements

Experienced cybersecurity professional with demonstrated Information Systems Security Officer experience supporting programs and contracts of comparable scope, type, and complexity.
Bachelor's degree in Computer Science or a related discipline from an accredited college or university. In lieu of degree, 4 years of direct experience as an ISSO may be substituted.
Ten (10) years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
Experience in at least two (2) of the following areas: Current security tools, Hardware/software security implementation, Communication protocols, Encryption techniques and tools.
DoD 8570 Information Assurance Management (IAM) Level I certification or higher.
Demonstrated experience with information-system security policies, standards, methodologies, security documentation, and day-to-day security operations.
Experience assessing system changes and their potential security impact.
Experience supporting security authorization, certification and accreditation, and information-assurance activities.
Active TS/SCI clearance with Polygraph.
Ability to work full-time on site in a secure environment.

Responsibilities

Help maintain the operational security posture of information systems and programs while ensuring applicable security policies, standards, and methodologies are implemented and followed.
Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies.
Plan and coordinate IT security programs and policies and help develop system security policies that ensure compliance.
Support the Information System Security Manager (ISSM) in maintaining the appropriate operational Information Assurance (IA) posture for systems, programs, and enclaves.
Evaluate security solutions to ensure they meet requirements for processing classified information.
Perform vulnerability and risk-assessment analysis in support of certification and accreditation activities.
Develop, maintain, and update security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, System Requirements Traceability Matrices (SRTMs), and other required IA documentation.
Develop and maintain C&A documentation in accordance with applicable ODNI and DoD policies and support obtaining C&A for information systems under your purview.
Support security-authorization activities in accordance with the National Institute of Standards and Technology Risk Management Framework (NIST RMF).
Manage and control system changes, evaluate their security impact, and provide Configuration Management (CM) for security-relevant information-system software, hardware, and firmware.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other system components, including system upgrades.
Support day-to-day security operations and administer user identification and authentication mechanisms for Information Systems.
Support customer transition to ServiceNow (SNOW).
Serve as the Approval Authority for Information Systems under your control, as required by the program.