Information Systems Security Officer

Seneca Holdings•Orlando, FL

3d•Onsite

About The Position

Seneca Strategic Partners is seeking a highly motivated Information Systems Security Officer (ISSO) to join their Orlando-based technical team supporting the National Cyber Range Complex (NCRC). The NCRC is crucial for enhancing the resilience of DoD systems and the effectiveness of U.S. cyber operations by providing full-spectrum test and evaluation, workforce training, and mission rehearsal events. As the NCRC evolves, the ISSO will be instrumental in ensuring secure facilities, tools, and expertise for demanding Department of Defense test, training, and mission rehearsal requirements. This role involves acting as a security liaison across various domains, including physical, personnel, information, cyber, operations, Anti-Terrorism/Force Protection, law enforcement, communications, and technical security, while collaborating with the Information Systems Security Manager (ISSM) to ensure compliance, readiness, and secure mission execution.

Requirements

Active Top Secret clearance with SCI eligibility.
Bachelor’s degree in Cybersecurity, Information Systems, or related discipline, and/or 8+ years of relevant experience (additional experience may substitute for degree).
Minimum of 5 years of extensive experience in cybersecurity, information assurance, and RMF processes.
DoD 8570.0 and DoDD 8140.01 IAT Level II certification or higher.
At least 2 years of experience conducting IT application, system, or network reviews and providing DoD cybersecurity policy and technical guidance.

Nice To Haves

Certification aligned to DoDM 8140.03 / DoD Cyberspace Workforce Framework.
Familiarity or background with some of the following technologies: Zero-trust requirements / concepts.
VMWare (vSphere, vCenter, NSX, ESXi)
RHEL (Ansible, Kubernetes, StackRox, OpenShift)
AWS / Azure cloud technologies and containerization
F5 BIG-IP, Cisco networking, and distributed technologies
STIG and IAVA implementation
NetApp storage technologies
Dell Blade Servers

Responsibilities

Provide direct support to the ISSM on activities such as Assessment & Authorization (A&A), execution of Continuous Monitoring Plans, and facilitation of Security Controls Assessments.
Administer and monitor Risk Management Framework (RMF) steps and activities throughout the system lifecycle to maintain an appropriate security posture.
Implement cybersecurity programs, policies, and procedures for assigned systems.
Maintain working knowledge of current and upcoming events, system functions, policies, safeguards, and security measures.
Serve as a subject matter expert (SME) in DoD, DIA, and RMF core concepts and processes.
Coordinate with applicable stakeholders across the enterprise to ensure security compliance and readiness.
Maintain Authorization to Operate (ATO) packages for assigned systems within the designated A&A System of Record (e.g., eMASS, XACTA 360, Keystone).
Review and analyze audit logs (e.g., Splunk, Windows EVTX, Linux syslogs) to detect potential anomalies or threats.
Perform validation checks to ensure CM-approved software and antivirus definitions are installed on assigned systems.
Conduct compliance/vulnerability scans and manual checks to identify and mitigate risks.
Execute ISSO-specific tasks as outlined in program security plans.
Implement account management processes, issuing credentials, and enforcing least-privilege principles.
Deliver cybersecurity education, training, and awareness to system users as required by the ISSM.

Benefits

Competitive pay
Benefits and perks
Flexible work-life balance
Professional development opportunities
Performance and recognition programs
Comprehensive benefits package that includes medical, dental, vision, life, and disability
Voluntary benefit programs (critical illness, hospital, and accident)
Health savings and flexible spending accounts
Retirement 401K plan
Competitive health and welfare benefits
Paid leave programs