ISSO 2

Koniag Government Services, LLC•Washington, DC

4d•$120,000 - $130,000

About The Position

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced Mid-Level Information System Security Officer (ISSO) to support KITS and its government customer, the Department of Energy’s National Nuclear Security Administration (DOE NNSA). The position is based in Las Vegas, Nevada; Albuquerque, New Mexico; Germantown, Maryland; or Washington, D.C., and requires a Top Secret security clearance/Q. The ISSO manages system, application, and hardware authorization activities to ensure cybersecurity requirements are implemented. The role develops and maintains authorization documentation and packages, applies the Risk Management Framework (RMF), and supports initial authorization, reauthorization, and continuous monitoring. The ISSO works within approved authorization boundaries, supports security decision-making and program quality standards, collaborates with contractors supporting NA-IM and NNSA, and mentors junior security personnel.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
3–5 years of experience in cybersecurity or information security.
At least 2 years of experience with RMF or similar security authorization frameworks.
Experience developing and maintaining ISSPs, risk assessments, and security baselines.
Experience working with federal agencies; DOE, NNSA, or Department of Defense experience is preferred.
Training that meets or is progressing toward NNSA and/or DoD 8140 requirements.
Strong knowledge of the NIST Risk Management Framework.
Understanding of federal cybersecurity regulations, policies, and standards.
Proficiency with security authorization documentation and processes.
Experience with risk assessment methodologies, security control implementation and assessment, continuous monitoring, and ongoing authorization.
Strong project management skills and ability to manage multiple tasks simultaneously.
Excellent documentation skills and attention to detail.
Strong written and verbal communication skills.
Knowledge of incident management and reporting requirements, NIST SP 800-53 security controls, system security planning, and vulnerability management processes.
Ability to work collaboratively in team environments.
Ability to obtain and maintain the required security clearance; the posting specifies Top Secret security clearance/Q.

Nice To Haves

Master’s degree in Cybersecurity, Information Technology, or a related field.
Certifications such as Security+, CISSP, CAP, or equivalent.
Experience specifically with DOE NNSA cybersecurity requirements.
Experience with eMASS, Archer, or similar authorization management systems.
Knowledge of FISMA compliance requirements.
Experience with security testing and evaluation.
Familiarity with supply chain risk management.
Experience presenting cybersecurity concepts to management.
Knowledge of system hardening techniques and practices.
Experience with security architecture review.
Understanding of cloud security principles.
Experience with security incident handling.
Knowledge of secure coding practices.
Familiarity with privacy requirements and documentation.

Responsibilities

Manage and develop system, application, and hardware authorization documentation, including Information System Security Plans (ISSPs), risk assessments, and security baselines.
Complete initial authorization and reauthorization activities accurately and on time.
Develop authorization packages independently and submit them to the ISSM for review.
Prepare authorization packages for review and approval by the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR).
Apply RMF methodology consistently across assigned systems.
Maintain knowledge of AO-approved risk boundaries and risk tolerance levels.
Update authorization documentation on organizational schedules in accordance with risk management objectives.
Conduct continuous monitoring for assigned systems.
Track security control implementation and effectiveness.
Document system changes and assess their impact on security posture.
Ensure operations adhere to approved authorization parameters and support transparent decision-making aligned with AO requirements.
Assist with contractor personnel onboarding and termination processes.
Ensure deliverables meet Enterprise Cybersecurity Program requirements and quality standards.
Provide technical support at meetings, briefings, and presentations.
Collaborate with other contractors supporting NA-IM and NNSA.
Mentor junior security personnel in authorization processes and documentation.