Information System Security Officer

AM Pierce & Associates, Inc.; Patuxent Highland (MD); Sur place; USD 80 000 - 130 000; Plein temps

Avantages offerts par ce poste

Medical, Dental and Vision Insurance

Traditional 401(k) and Roth 401k Plans

Paid Time Off and Holidays

Professional Development Opportunities

Résumé du poste

AM Pierce & Associates is seeking an Information System Security Officer to support cyber security operations for a DoD DoW customer in Lexington Park, MD. The role emphasizes RMF, eMASS artifact preparation, and continuous monitoring to maintain ATO status.

The ideal candidate will have 2+ years in a cybersecurity role within DoD or federal environments, familiarity with NIST 800-53, and DoW Secret clearance. Travel is 10%.

Qualifications

• Bachelor's degree in computer science, Cybersecurity, or related field, or equivalent experience.
• 2+ years of experience in systems security.
• Clear and effective communication of technical approaches.

Responsabilités

• Assist in detection, identification, and reporting of cyber-attacks and intrusions using CND tools.
• Assist with security events and incident correlation.
• Prepare artifacts for eMASS, including SSPs and SCTMs.
• Verify configurations against NIST 800-53 requirements and document gaps.
• Manage POA&M tracking and remediation coordination.
• Coordinate with ISSEs and engineers to gather evidence of control implementation.
• Support continuous monitoring activities and periodic control reviews.
• Track authorization expiration dates and support re-authorization efforts.
• Maintain audit-ready documentation in eMASS and support external audits.

Connaissances

RMF knowledge

NIST 800-53 familiarity

Artifact preparation & eMASS

Security incident response

Formation

Bachelor's degree in computer science or related field

Advanced degree preferred

Outils

eMASS

ACAS/Nessus

SCAP

Description du poste

Information System Security Officer

AM Pierce & Associates

Who We Are: AM Pierce & Associates and Applied Technologies Group (ATG), a wholly owned subsidiary of AM Pierce and Associates, is a woman-owned small business providing Engineering & Research, Cyber, C5ISR, Program & Acquisition Management services and solutions to a diverse government and industry client base. We are a stable and growing company who offers our employees a rich benefits package, supportive and flexible work environment, and the opportunity to work with experts in their field.

The Position: Torch Technologies is seeking an Information System Security Officer to join a team supporting cyber security operations for our DoW customer in Lexington Park MD.

Salary: The estimated salary range for this position is $80,000 - $130,000 annually, based upon an individual's level of experience, skillset, and education. The range that is given is an estimate and may vary based on contractual constraints. At AM Pierce & Associates, it is our goal to provide equitable compensation for all employees.

Location: Lexington Park, MD

Work Environment: On-Site

Description

• Assists in providing detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities. Uses Computer Network Defense (CND) tools for continual monitoring and vulnerability testing and analysis of system activity to identify malicious activity.
• Assists with performing security events and incident correlation using information gathered from a variety of sources.
• Collect, prepare, and submit artifacts supporting eMASS ATO packages, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and supporting evidence for control implementation.
• Verify system and network configurations against NIST 800-53 control requirements, identifying and documenting gaps or non-conformance.
• Manage the Plan of Action and Milestones (POA&M) for assigned systems, including tracking open findings, coordinating remediation with system owners and engineers, and closing items with appropriate evidence.
• Coordinate with ISSEs, system administrators, and engineering teams to gather technical evidence and validate control implementation.
• Support continuous monitoring activities, including periodic control reviews, vulnerability scan result analysis, and reassessment of control effectiveness.
• Track authorization expiration dates and lead re-authorization/renewal efforts to maintain continuous ATO status.
• Maintain accurate, audit-ready documentation in eMASS for assigned systems and support external audits or assessor requests.
• Review vulnerability and compliance scan results (e.g., ACAS/Nessus, SCAP) and correlate findings to relevant 800-53 controls and POA&M items.
• Support incident reporting and documentation requirements in accordance with applicable DoD and program policies.
• Communicate risk posture and compliance status to program management and Authorizing Officials (AOs) as required.

Education & Experience

• Bachelor's degree in computer science, or a related field or equivalent experience. Advanced degree preferred.
• A minimum of 2 years of experience in systems security.
• Able to communicate effectively and clearly present technical approaches and findings.
• Work is performed under some direction. Exercises a limited degree of latitude in determining technical objectives of assignment.

Required Qualifications

• Active DoW Secret security clearance required
• US. citizenship required.
• Bachelor's degree in information technology, Cybersecurity, or a related field, or equivalent professional experience.
• 2+ years of experience in an ISSO, ISSM, or compliance-focused cybersecurity role within DoD or federal environments.
• Working knowledge of the Risk Management Framework (RMF) and NIST 800-53 security controls.
• Hands-on experience preparing and submitting artifacts in eMASS.
• Demonstrated experience managing POA&Ms, including tracking, coordinating remediation, and documenting closure of findings.
• Familiarity with vulnerability and compliance scanning tools (e.g., ACAS/Nessus, SCAP) and interpreting results against control requirements.
• DoD 8570/8140-compliant certification at IAM/IAT Level II or higher (e.g., Security+, CAP, CySA+).

Preferred Qualifications

• CAP, CASP, CISSP, or CISM certification.
• Experience supporting both classified and unclassified system authorizations.
• Experience with continuous monitoring/ConMon programs and periodic reassessment cycles.
• Familiarity with STIG-based hardening and correlating hardening evidence to control families.
• Experience supporting multiple concurrent ATO packages across varying system types.

Travel

• Yes, employees will be required to travel 10% of the time.

AM Pierce & Associates, As Well As Its Subsidiaries, Invests In Its Employees Beyond Just Compensation. Elements Of The Total Rewards Package Include Competitive Base Pay And Variable Compensation Opportunities. AM Pierce & Associates, As Well As Its Subsidiaries, Also Provides Eligible Employees With An Opportunity To Enroll In a Variety Of Benefit Programs, Generally Including

• Medical, Dental and Vision Insurance
• Life and Accidental Death & Disability Coverage
• Traditional 401(k) and ROTH 401k Retirement Plans
• Paid Time Off and Holidays
• Professional Development Opportunities
• Incentive Programs, Awards and Recognition
• Employee Assistance Program
• Will Preparation
• Identity Theft Protection & Legal Support
• Referral Program
• Voluntary Accident, Critical Illness, and Hospital Indemnity Coverage
• Pet Insurance
• Norton Life Lock
• HSA and FSA plans

The specific program and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, Full or Part-time status, and the applicability of collective bargaining agreements.

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. AM Pierce & Associates, as well as its subsidiaries may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.

AM Pierce & Associates, as well as its subsidiaries, comply with all Federal and State laws and regulations concerning Affinite action and workplace equal opportunity. In further detail, AM Pierce & Associates, as well as its subsidiaries, does not discriminate in employment decisions (to include applicants and employees) based on race, color, religion, sex, genetic information, sexual orientation, gender identity, national origin, disability or protected veteran status. AM Pierce & Associates, as well as its subsidiaries, takes affirmative action to ensure that equal opportunity is provided in all aspects of employment. AM Pierce & Associates, as well as its subsidiaries, does not take adverse employment actions against applicants and employees for asking about, discussing, or sharing information about their pay or the pay of their co-workers.

AM Pierce & Associates, as well as its subsidiaries, verify employment eligibility through E-Verify.

This is a non-management position.