Junior Information Systems Security Officer (ISSO)

INFORMATION SYSTEMS SOLUTIONS, INC•Suitland, MD

1d•$85,000 - $95,000•Onsite

About The Position

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team. 100% onsite

Requirements

TS/SCI clearance
One of the following certifications (IAT Level II): CCNA-Security, GICSP, GSEC, Security+ CE, SSCP
1–2 years of experience in cybersecurity or a related field
Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
Knowledge of Department of the Navy (DON) cybersecurity policies and directives
Experience with automated cybersecurity assessment tools, including: Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmarks, Security Content Automation Protocol (SCAP), Retina
Experience supporting cybersecurity documentation, including Authorization and Accreditation (A&A) and RMF artifacts
Basic knowledge of cloud service models (Software as a Service, Platform as a Service, Infrastructure as a Service)
Basic knowledge of cloud deployment models (public, private, hybrid, and community) and associated architectures
Ability to develop security control assessment procedures and test statements using Governance, Risk, and Compliance (GRC) tools such as eMASS and Xacta
Effective written and verbal communication skills
Strong organizational skills and attention to detail
Ability to work effectively in a team environment
Ability to adapt to changing requirements and operational priorities
Ability to follow established procedures and directions
Adherence to the established chain of command when addressing issues or inquiries
Demonstrated desire to learn, grow, and develop professionally within the cybersecurity field

Responsibilities

Support RMF lifecycle activities by maintaining Authorization & Accreditation (A&A) documentation, implementing security controls, and assisting with system authorization efforts using eMASS and Xacta.
Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation and validating compliance with DON cybersecurity requirements.
Ensure compliance with NAVINTEL ICD 503 and Department of the Navy cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments.
Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation.