ISSO

Watershed Security•Philadelphia, PA

9d•$70,000 - $100,000•Hybrid

About The Position

Watershed Security is seeking a Senior Information Systems Security Officer (ISSO) to support the Naval Surface Warfare Center (NSWC) in Philadelphia, PA. The role involves coordinating and implementing security changes across an organization to ensure compliance with policies, conducting cybersecurity vulnerability and threat analysis, and supporting cyber incident response through isolation, investigation, data collection, and reporting. The position requires a strong understanding of cybersecurity best practices and the ability to adapt to emerging threats.

Requirements

Bachelor’s degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university.
At least one of the following active certifications: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP.
6 years practical experience in a cybersecurity or A&A related field.
Top Secret Clearance; US Citizen.
Experience with the Navy RMF Process Guide (RPG), and Navy A&A tools such as ACAS, eMASS and eMASSter.
Proficient with Microsoft Office Suite (Word, Excel, Teams, Project).
Self Starter; detail oriented; able to brief senior level staff.

Nice To Haves

Experience supporting 10 or more Navy Packages (achieving and/or maintaining ATO)
Experience with the NAVSEA RMF Business Rules

Responsibilities

Collaborate with various levels of the organization to implement required security changes and ensure compliance with established security policies and standards.
Conduct comprehensive cybersecurity vulnerability and threat assessments to identify and mitigate risks to information systems.
Lead cyber-incident-response efforts, including isolating affected systems, conducting initial investigations, collecting relevant data, and providing status updates and reports to leadership.
Provide guidance on best practices and recommend improvements to the organization's security posture.
Perform risk assessments and develop mitigation strategies to protect sensitive data from internal and external threats.
Support continuous monitoring of information systems and provide regular status reports on security compliance.
Maintain up-to-date knowledge of emerging cybersecurity threats and industry best practices.