Information System Security Officer III with Security Clearance

ORBIS Inc; Corona (CA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Excellent benefits package

Job summary

ORBIS Inc. seeks an ISSO III to manage day-to-day security controls across assigned systems under the NSWC Corona CCAM contract. You will implement RMF and continuous monitoring, coordinate with engineers and admins, assess vulnerabilities with ACAS/Nessus, and maintain artifacts in eMASS.

You will draft RMF documentation, support incident response, and ensure least-privilege access while working in a fast-paced environment with deadlines.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science or related field (significant experience may substitute).
• Active TS/SCI clearance and U.S. citizenship required.
• Minimum 6 years coordinating and implementing security changes, vulnerability analysis, and continuous monitoring.

Responsibilities

• Implement, monitor, and maintain security controls across information systems.
• Lead vulnerability assessments using ACAS/Nessus and analyze results to identify critical flaws.
• Apply STIGs with SCC and STIG Viewer reviews.
• Assemble artifacts in eMASS to demonstrate NIST 800-53 controls.
• Draft RMF documentation: ISCP, IRP, inventories.
• Support POA&M creation and remediation steps.
• Review SIEM alerts, logs, and firewall traffic daily for anomalies.
• Enforce least-privilege access and manage account configurations.
• Assist in cyber incident response and root-cause analysis.
• Monitor IAVAs and ensure timely patch deployment.
• Participate in CCBs for security impact of changes.
• Conduct physical security walkthroughs of facilities housing sensitive systems.
• Assist in formal command cyber inspections and validation events.

Skills

Vulnerability analysis

RMF lifecycle

Continuous monitoring

Windows security configurations

Linux/Red Hat security

AD group policies

Scripting (PowerShell)

Scripting (Python)

Scripting (Bash)

Security operations

Education

Bachelor's degree in Information Technology/Cybersecurity/Computer Science

Tools

ACAS (Tenable/Nessus)

HBSS (Trellix/McAfee)

Splunk (SIEM)

STIG Viewer

SCAP Compliance Checker

eMASS

Job description

Job Description: Position Overview ORBIS requires an Information System Security Officer III (ISSO III) to serve as a tactical cybersecurity expert supporting the NSWC Corona CCAM contract. Working under the direction of the ISSM, the ISSO III is responsible for the day-to-day implementation, monitoring, and maintenance of security controls across assigned information systems. This key personnel role is heavily involved in the technical aspects of the RMF lifecycle and continuous monitoring programs.

Operational Cybersecurity & RMF Responsibilities:

• Coordinate directly with system engineers, developers, and administrators to ensure security configurations are applied during the system development lifecycle.
• Conduct comprehensive vulnerability assessments utilizing the Assured Compliance Assessment Solution (ACAS/Nessus) and analyze the results to identify critical flaws.
• Apply and verify Security Technical Implementation Guides (STIGs) using the SCAP Compliance Checker (SCC) and manual STIG Viewer reviews.
• Develop, compile, and upload high-quality artifacts into eMASS to demonstrate the successful implementation of NIST 800-53 security controls.
• Draft and update essential RMF documentation, including Information System Contingency Plans (ISCP), Incident Response Plans (IRP), and hardware/software inventories.
• Assist the ISSM in creating, updating, and managing Plan of Action and Milestones (POA&M) entries, documenting steps taken to remediate identified vulnerabilities.
• Perform daily reviews of system audit logs, Security Information and Event Management (SIEM) alerts, and firewall traffic to identify anomalous or malicious activity.
• Enforce account management policies, ensuring that user access, privileged access, and administrative roles are granted according to the principle of least privilege.
• Support cyber incident response activities, executing containment procedures, preserving evidence, and assisting in root‑cause analysis.
• Monitor systems for compliance with Information Assurance Vulnerability Alerts (IAVAs), ensuring patches and updates are tested and deployed within mandated timeframes.
• Participate in Configuration Control Board (CCB) meetings to evaluate the security impact of proposed network changes, software installations, or hardware modifications.
• Conduct physical security walk‑throughs and environmental control checks for facilities housing classified or sensitive information systems.
• Assist in the preparation and execution of formal command cyber inspections and assist the NQV during official validation events.Required Qualifications & Clearances: * Clearance: Must possess an active, TS/SCI and be a United States citizen.
• Education: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. (Significant operational experience and advanced certifications may substitute for the degree).
• Experience: A minimum of six (6) years of dedicated experience coordinating and implementing security changes, conducting vulnerability analysis, and managing continuous monitoring activities.
• Technical Experience: Demonstrable hands‑on experience utilizing ACAS (Tenable/Nessus), HBSS (Trellix/McAfee), Splunk (or similar SIEM), and STIG Viewer.
• Certifications: Must possess and maintain a current DoD 8140/8570 IAM Level II certification (e.g., CAP, CASP+ CE, CISM, CISSP, GSLC, CCISO, or HCISPP).
• Strong working knowledge of Windows and Linux/Red Hat operating system security configurations and Active Directory group policies.
• Ability to work effectively in a fast‑paced environment, balancing multiple RMF package deadlines and continuous monitoring requirements simultaneously.Preferred Qualifications: * Certifications in specific operating systems or security tools (e.g., Linux+, Microsoft Certified Azure Security Engineer, Splunk Core Certified Power User).
• Prior experience serving as an ISSO for a Navy Research, Development, Test, and Evaluation (RDT&E) environment.
• Direct experience writing custom scripts (PowerShell, Python, Bash) to automate security compliance checking and log analysis.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. ORBIS offers an excellent benefits package and a competitive salary in a professional atmosphere.