Information Systems Security Officer( (ISSO)

Leidos•Annapolis Junction, MD

1d•Onsite

About The Position

Leidos is hiring a Senior Information System Security Officer (ISSO) in its National Security Sector’s Cyber & Analytics Business Area. The position is based in Annapolis Junction, Maryland, and supports a large software development program covering software maintenance and development, IT support for networks, workstations, and servers, systems integration and lifecycle support, enterprise application development, network engineering, and information systems security. The ISSO works with other security professionals to develop and implement strategies to detect and mitigate threats, protect critical data, and assess system and network vulnerabilities. The role supports the implementation and enforcement of information systems security policies, standards, and methodologies; evaluates security solutions; maintains security documentation and operational security posture; and assists with vulnerability-alert management and remediation. The ISSO also supports the Information System Security Manager in maintaining the appropriate operational information assurance posture for a system, program, or enclave.

Requirements

Bachelor’s degree in a related field and at least 8 years of relevant experience; additional experience may substitute for a degree.
At least 10 years of experience as an ISSO working independently and/or on teams maintaining secure information system operations in isolated, connected, and standalone environments.
At least 5 years of experience using tools to support IAVA management.
At least 5 years of experience using tools to prepare, maintain, and manage system security plans and other security-related documentation.
Demonstrated knowledge of and experience with several of the following: current security tools, hardware/software security implementation, communication protocols, and encryption techniques/tools.
In-depth experience conducting security evaluations of software systems or architectures to ensure they meet security requirements.
In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
Demonstrated experience performing day-to-day security operations for large, complicated information and information-processing systems.
Must hold a TS/SCI clearance with polygraph.
Must be committed to developing and adhering to best practices.
Must have a high level of self-initiative, be a solutions-oriented team player, and have excellent interpersonal skills.

Nice To Haves

Extensive experience as an Information Systems Security Officer on large software development and integration programs.
DoD 8570 compliance with IAT Level II or higher.
DoD 8570 compliance with IAM Level II or higher.

Responsibilities

Support implementation and enforcement of information systems security policies, standards, and methodologies.
Assist in evaluating security solutions to ensure they meet requirements for processing different types of information.
Manage configuration of security-relevant information system software, hardware, and firmware.
Analyze threats and develop and implement best-practice methods for incident detection, reporting, and vulnerability remediation.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and system upgrades.
Maintain the operational security posture of information systems.
Support the Information System Security Manager in maintaining the appropriate operational information assurance posture for a system, program, or enclave.
Develop and maintain Certification and Accreditation documentation in accordance with specified policies.
Develop and update system security plans and other information assurance documentation.
Support Information Assurance Vulnerability Alerts management, including initiating responses and system security scans, completing remediation, and extending patches and security updates to designated sites.
Develop system security policy and ensure compliance.
Administer the information system’s user identification and authentication mechanisms.