Overview
Skills
Job Details
Role:
Information Systems Security Officer (ISSO)
Location:
Fairfax, VA
Minimum Clearance:
Active TS//SCI with CI Poly
Summary:
Client is seeking a highly motivated ISSO to support the Fairfax facility. The role will assist the ISSM/ISSO to ensure compliance with IC and DoD security guidelines/directives and provide special project support to the Security Team.
Job Description / Responsibilities:
-
Perform assessments of systems/networks to identify deviations from acceptable configurations, policies, or standards via compliance audits and vulnerability assessments.
-
Develop and maintain documentation in support of RMF processes, operating procedures, and policies.
-
Create and manage POAMs in response to reported security vulnerabilities.
-
Perform Information Assurance (IA) activities within cleared environments to meet client timelines.
-
Conduct Continuous Monitoring (ConMon) per NIST SP 800-137, including auditing for anomalomalicious activity.
-
Establish strict program control processes to mitigate risks and support system certification and accreditation.
-
Provide process, analysis, coordination, test, documentation, and inspection support for emerging technologies.
-
Perform periodic audit reviews, track corrective actions, and manage closure of issues.
-
Manage media handling, labeling, scanning, and cross-domain data transfers (manual and automated).
Basic Qualifications:
-
TS/SCI clearance with CI Poly.
-
DoD 8570 IAM Level I certification.
-
Experience with:
-
Security tools, hardware/software security implementation.
-
Communication protocols.
-
Encryption techniques/tools.
-
Required Skills & Experience:
-
Knowledge of ICD 503, NIST SP 800-37, CNSS publications, and other RMF processes.
-
Experience with scan tools and systems: STIG, SCAP, EVSS, Security Center, Nessus, NMAP.
-
Strong analytical/problem-solving skills to address evolving client situations.
-
Ability to incorporate new knowledge seamlessly in client interactions.
-
Experience working with development teams to integrate security practices from requirements phase onward.
-
Relevant security certifications (Security+, CISSP, etc.) or ability to obtain within 6 months of hire.
Desired Skills & Experience:
-
Nessus scanning, STIG/SCAP compliance.
-
Splunk (including Security Essentials).
-
eMASS and ServiceNow.
-
Linux/Unix operating systems.
-
Conducting ISAP inspections.
-
Experience configuring/securing Windows systems.
-
IC customer's ServiceNow and DoD eMASS.
-
AWS or other cloud technologies.
-
Strong writing skills (executive and technical audiences).
Education & Experience:
-
Bachelor's Degree in Computer Science, Information Technology, or related field (or equivalent experience).