Junior Information System Security Officer (ISSO) - Audit-Focused

ASEC•Patuxent River, MD

2d•$120,000 - $135,000•Onsite

About The Position

The Junior Information Systems Security Officer (ISSO) will provide critical cybersecurity auditing support to the OASIS team in PMA-205 by reviewing system audit records, identifying and documenting security concerns, and reporting findings to the Information System Security Manager (ISSM) or cybersecurity lead. This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information. The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field highly desired. In lieu of degree, 5 years’ experience as an IT technician on DoD classified networks is acceptable.
Minimum 3 years of ISSO or cybersecurity experience, with a strong desire to increase experience that is focused on system/network security auditing.
Hands-on experience with ACAS, DISA STIGs, SCAP Compliance Checker, and DoD information security standards.
Familiarity with NIAP/Common Criteria, DoD APL, and DoD/IC cybersecurity directives.
Ability to build positive, collaborative relationships across teams and with external partners.
Effective communicator with strong verbal and written skills.
Proactive, self-directed work style with the ability to operate independently.
Analytical thinker with proven problem-solving capabilities.
Highly organized, with the ability to balance competing priorities in a fast-paced environment.
U.S. citizenship and an active DoD Top Secret clearance.
Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Nice To Haves

Experience with SolarWinds Security Event Manager (SEM), ARM, and related monitoring/auditing tools is preferred.

Responsibilities

Assisting with reviewing information system audit logs in accordance with established daily, weekly, and monthly schedules.
Monitoring security logs for unauthorized access attempts, unusual account activity, privilege changes, policy violations, and other suspicious events.
Documenting audit reviews using approved checklists, tracking systems, and reporting templates.
Identifying and report audit discrepancies, anomalies, and potential security concerns to the ISSM or senior cybersecurity personnel.
Escalating suspicious or significant events in accordance with established incident reporting procedures.
Assisting with tracking audit findings and maintaining supporting documentation through resolution.
Supporting periodic reviews of user accounts, privileged accounts, and access permissions.
Verifying that user access aligns with approved roles and authorization records.
Assisting with reviewing records related to account creation, modification, disabling, and removal.
Aiding in maintaining audit records to demonstrate compliance with organizational security requirements.
Supporting internal and external assessments by collecting and organizing requested audit evidence.
Assisting with preparing recurring audit reports, metrics, and compliance documentation.
Following established procedures for handling classified, controlled, or sensitive information.
Safeguarding audit information from unauthorized access, alteration, or disclosure.
Learning and applying applicable cybersecurity policies, procedures, and regulatory requirements.
Performing other audit and compliance-related duties as assigned within the scope of the position.