Information Systems Security Officer

Two Six Technologies•Arlington, VA

16h•$110,000 - $160,000•Onsite

About The Position

Two Six Technologies is seeking an Information System Security Officer (ISSO) to join its Corporate Information Security team. The ISSO will assist the Information System Security Manager (ISSM) in ensuring compliance for assigned classified programs and will advise the ISSM throughout the Risk Management Framework (RMF) process. The role involves supporting classified information systems, developing and submitting authorization packages, monitoring security activity, and maintaining the organization’s security posture through technical, administrative, and procedural measures. This is an on-site position based daily at the company’s Arlington, Virginia office, with occasional travel to Herndon and other local sites. The work environments and tools include Windows 11, Group Policy, Ubuntu Linux, networked and standalone systems, GFE networks, Google Workspace, Jira, and Kanban.

Requirements

Bachelor’s degree in a related field, or additional experience and professional certifications.
At least 3 years of experience working in classified environments, including Collateral, SCIF, or SAP-F, as an ISSO, Network Engineer, Cybersecurity Analyst, SOC Analyst, or in a related role.
Understanding of RMF Steps 1–7.
Active DoD 8140 information security certification such as Security+, GCISP, GSEC, SSCP, CASP+, CISM, or CISSP, or ability to obtain one within 6 months of employment.
Ability to work independently to identify, assess, and resolve unique security problems.
Ability to work on-site daily at the Arlington headquarters and travel occasionally to local sites.
Active Top Secret clearance with SCI eligibility and willingness to obtain a polygraph if required.
Attention to detail, strong analytical and critical problem-solving abilities for technical and non-technical problems, and excellent written and oral communication skills.

Nice To Haves

Experience with successful DCSA on-site compliance inspections with a variety of government customers.
Working knowledge of Jira or similar ticket management systems.
Experience writing customer reports, SOPs, and Information Security bulletins.
Experience with Incident Response.
Experience with Windows and Linux automation scripting.

Responsibilities

Work with the Corporate Information Security team to ensure assigned classified information systems remain compliant or achieve compliance.
Organize and track Information Security projects and keep efforts and communications aligned with goals and deadlines.
Work with the ISSM and Project Managers to scope program requirements, propose pathways, and construct ATO packages.
Complete STIG checklists and track POA&Ms.
Use ATO lifecycle products, including eMASS and Xacta, to draft and submit RMF packages.
Review security logs, networks, data transfers, and systems for anomalous user activity.
Assist in remediating security incidents.
Perform weekly, bi-weekly, and monthly audits for assigned accredited systems.
Conduct Continuous Monitoring activities according to customer requirements.
Serve as an advisor to the ISSM in the RMF process.
Perform annual self-inspections and self-assessments of TST’s security program.
Track information-system changes as part of Change Management and attend Change Management Meetings.
Assist the ISSM in managing TST’s Insider Threat Program.
Proactively maintain TST’s security posture using technical, administrative, and procedural solutions.