Information Systems Security Officer

Seneca Holdings•Mechanicsburg, PA

9d•Hybrid

About The Position

Seneca Technologies, part of the Seneca Nation Group portfolio, is seeking an Information System Security Officer (ISSO) to support a Department of War (DOW) agency’s cybersecurity and risk management program in a contractor environment. The ISSO helps ensure information systems comply with DOW cybersecurity requirements and authorization standards. The role supports Risk Management Framework (RMF) activities, security authorization efforts, continuous monitoring, access control management, and risk assessments. The ISSO works with system owners, cybersecurity teams, and mission stakeholders to maintain the security posture of DSCA systems and support compliance with applicable federal and DOW policies. The position is located in Mechanicsburg, Pennsylvania. Remote work may be authorized for employees who reside within commuting distance of an approved SIPRNet access location and can support classified work requirements as needed. Some CONUS travel is required. An active Secret clearance is required. Seneca Technologies describes a collaborative work environment and offers competitive pay, benefits and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. The comprehensive benefits package includes medical, dental, vision, life, and disability coverage; voluntary critical illness, hospital, and accident programs; health savings and flexible spending accounts; and a 401(k) plan. Full-time employees regularly working at least 30 hours per week are eligible for benefits and paid leave programs.

Requirements

Demonstrated experience supporting cybersecurity compliance, system security, and RMF processes.
Strong understanding of DOW cybersecurity policies, standards, and security authorization requirements.
Experience supporting system accreditation and authorization activities within DOW environments.
Knowledge of access control management, identity management, and account review processes.
Experience evaluating and reporting security vulnerabilities affecting DOW information systems and networks.
Strong analytical, organizational, and communication skills.
Ability to work independently and collaboratively in a mission-focused environment.
U.S. citizenship and ability to obtain and maintain required government security clearances, as applicable.
Current Secret clearance.
One or more of the following: CompTIA Security+ CE, Certified in Governance, Risk and Compliance (CGRC), Certified Information Systems Security Professional (CISSP), or an equivalent cybersecurity certification meeting DOW requirements.
A bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and at least five years of experience supporting RMF, cybersecurity compliance, information assurance, or system security activities; or at least nine years of directly relevant cybersecurity, RMF, information assurance, or system security experience in lieu of a degree.
Knowledge of RMF, security authorization and accreditation, security control assessment and validation, continuous monitoring programs, cybersecurity risk assessments, POA&M management, DOW cybersecurity frameworks and guidance, DOW Cloud Computing Security Requirements Guide (CCSRG), NIST Special Publication 800-37, DOW RMF guidance, identity and access management, user provisioning and deprovisioning, RBAC, privileged access management, periodic user access reviews, account compliance monitoring, vulnerability identification and remediation, security compliance reporting, risk-based decision support, and security documentation management.
For authorized remote work, reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.
Some CONUS travel is required.

Nice To Haves

Veterans with expertise in the listed areas are highly encouraged to apply.
Seneca or Native individuals receive hiring preference.

Responsibilities

Support system categorization and conduct cybersecurity risk assessments in accordance with applicable DOW and federal guidance.
Assist with implementation and execution of the RMF lifecycle for assigned systems.
Support system accreditation and security authorization activities, including preparing and maintaining authorization documentation.
Ensure compliance with DOW cybersecurity policies, standards, and security controls.
Monitor information systems and support continuous monitoring activities to identify and address security risks.
Evaluate continuous monitoring dashboards and security reporting tools to assess system security posture.
Manage user provisioning, deprovisioning, and periodic access reviews to support least-privilege and access-control requirements.
Track, assess, and coordinate remediation of identified security vulnerabilities and compliance deficiencies.
Collaborate with system owners, engineers, cybersecurity personnel, and Authorizing Officials to support secure system operations.
Support security assessments, audits, inspections, and cybersecurity compliance reviews.
Maintain security documentation, plans, and artifacts required for authorization and continuous monitoring activities.
Develop reports, metrics, and status updates related to cybersecurity compliance and risk management activities.