Information Systems Security Officer (ISSO)

SNS One, Inc.•Fort Meade, MD

21h•Onsite

About The Position

SNS One, Inc., a Service-Disabled Veteran-Owned Small Business (SDVOSB), is seeking an Information Systems Security Officer (ISSO) to support mission-critical cybersecurity and information assurance efforts within a highly secure government environment. This role supports the implementation and enforcement of information systems security policies, standards, and methodologies across classified systems and networks. The ideal candidate will have experience supporting RMF activities, maintaining system security posture, assisting with accreditation documentation, and supporting day-to-day information assurance operations in compliance with DoD and NIST standards.

Requirements

Active TS/SCI with Full Scope Polygraph required for consideration
Two (2) years of experience as an Information Systems Security Officer (ISSO/ISO) on programs/contracts of similar scope, type, and complexity
Bachelor’s degree in Computer Science or related discipline from an accredited college or university
Four (4) years of additional ISSO/ISO experience may be substituted in lieu of a degree
DoD 8570 Compliance with IAT Level I certification or higher required
Understanding of NIST RMF
Understanding of Information Assurance principles
Understanding of Configuration Management
Understanding of Security compliance and accreditation processes
Understanding of Classified systems security requirements

Nice To Haves

Experience supporting government or DoD environments
Familiarity with vulnerability management and security auditing tools
Strong documentation and organizational skills
Ability to work independently and within a team environment
Excellent communication and problem-solving skills

Responsibilities

Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies
Assist with maintaining the operational security posture of systems and environments processing classified information
Support day-to-day security operations for information systems and enclaves
Assist with vulnerability and risk assessment activities related to certification and accreditation efforts
Help evaluate security solutions to ensure compliance with classified processing requirements
Support Configuration Management (CM) activities for security software, hardware, and firmware
Maintain records for workstations, servers, routers, firewalls, switches, and related network devices including system upgrades and changes
Assist with security impact analysis for system changes and modifications
Prepare and maintain security documentation including: System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) Packages, System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in accordance with the NIST Risk Management Framework (RMF)
Ensure compliance with established information assurance and cybersecurity requirements