Specialist, Cyber Intelligence (ISSO)

L3Harris•Fountain, CO

8d•Onsite

About The Position

The Information System Security Officer (ISSO) is responsible for supporting the cybersecurity posture of assigned information systems and ensuring compliance with applicable security requirements, policies, and standards. This role involves assisting with the implementation and maintenance of security controls, monitoring system security, managing vulnerabilities, supporting incident response, and maintaining required cybersecurity documentation. The ISSO will work closely with system administrators, engineers, program teams, and the Information System Security Manager (ISSM) to protect systems, support authorization activities, and maintain ongoing compliance. The position requires support for compliance with security frameworks such as RMF, NIST 800-53, NIST 800-171, CNSSI, or other applicable government/industry standards. The ISSO will also assist with the implementation, assessment, and continuous monitoring of security controls, review vulnerability scan results, support remediation efforts, track POA&Ms, and assist with cybersecurity incident reporting and response. Maintaining cybersecurity documentation like SSPs, SOPs, contingency plans, and audit artifacts is also a key responsibility, requiring coordination with various teams.

Requirements

Bachelor’s Degree and minimum 4 years of prior relevant experience.
Graduate Degree and a minimum of 2 years of prior related experience.
In lieu of a degree, minimum of 8 years of prior related experience.
DoD 8570 IAT II certification (e.g. Security+).
Ability to obtain and maintain a security clearance at the Secret level.

Nice To Haves

Experience supporting the cybersecurity posture of DoD information systems in compliance with federal, DoD, and contractual security requirements.
Working knowledge of RMF, NIST 800-53, NIST 800-171, CNSSI, and related cybersecurity guidance.
Experience assisting with system authorization and accreditation activities for DoD environments.
Ability to develop, review, and maintain cybersecurity documentation, including SSPs, POA&Ms, contingency plans, configuration management records, and continuous monitoring artifacts.
Experience supporting security control implementation, assessment, and remediation tracking.
Knowledge of vulnerability management processes, including STIG compliance, patching, system hardening, and corrective action follow-up.
Experience supporting continuous monitoring activities to maintain ongoing compliance and authorization readiness.
Ability to assist with cybersecurity incident investigation, documentation, and reporting in accordance with DoD and contractor procedures.
Experience collaborating with system administrators, engineers, program managers, and ISSMs to support secure system operations.
Experience supporting audits, inspections, self-assessments, and government customer reviews.
Knowledge of requirements for protecting classified information, controlled unclassified information, and other sensitive data.

Responsibilities

Assist with implementing and maintaining security controls.
Monitor system security.
Manage vulnerabilities.
Support incident response.
Maintain required cybersecurity documentation.
Work closely with system administrators, engineers, program teams, and the Information System Security Manager (ISSM) to help protect systems, support authorization activities, and maintain ongoing compliance.
Support compliance with security frameworks and requirements such as RMF, NIST 800-53, NIST 800-171, CNSSI, or other applicable government/industry standards.
Assist with the implementation, assessment, and continuous monitoring of security controls for information systems, networks, or enclaves.
Review vulnerability scan results, supporting remediation efforts, tracking POA&Ms, and assisting with cybersecurity incident reporting and response activities.
Maintain cybersecurity documentation such as SSPs, SOPs, contingency plans, and audit artifacts, while coordinating with ISSMs, system administrators, engineers, and program teams.
Provide cybersecurity guidance and awareness support to users and technical teams.