Information System Security Officer (ISSO)

Talentify; California (MO); On-site; USD 145,000 - 165,000; Full time

Benefits offered by this job

100% employee-owned company

Comprehensive benefits package

401(k) with company match

Job summary

ASEC seeks an Information System Security Officer near NAS Point Mugu, CA. The role requires a U.S. DoD Top Secret clearance and 100% on-site work with no telework eligibility.

You will shape and enforce security policies across mission-critical DoD systems, performing risk analyses, ATO documentation, and continuous monitoring. Required are CompTIA Security+ and a bachelor's degree in IT, cybersecurity, CS, or related field, or 5 years of equivalent DoD security experience with baseline

Qualifications

• CompTIA Security+ is required.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related area of study is required. In lieu of a bachelor's degree, candidates must have 5 years of information system security officer / cybersecurity engineering experience in addition to a DoD approved baseline certification.

Responsibilities

• Propose, coordinate, implement, and enforce information system security policies, standards and methodologies.
• Conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP tools.
• Implement security configurations for operating systems and network devices per DISA STIGs.
• Perform security control continuous monitoring, review SSPs, SOPs, and POA&Ms.
• Identify CNSS 1253 and NIAP certified technologies and DISA APL.
• Prepare certification letters and MOAs with system owners for interfaces.
• Provide guidance on cross-functional cybersecurity efforts aligning with program goals.
• Collaborate on documentation for Information System Authority to Operate decisions.

Skills

CompTIA Security+

Education

Bachelor's degree in Information Technology / Cybersecurity / Computer Science

Job description

Description

Location: NAS Point Mugu, CA

Security Clearance Requirement: Top Secret

Telework Eligible? No - 100% On-Site

What You’ll Do:

As an Information System Security Officer, you will play a key role in supporting a high-visibility DoD program. In this role, you’ll help shape and enforce the information system security policies, standards, and methodologies that keep our mission-critical systems protected. Are you ready to make an impact? Due to the classified nature of this work, this position is not eligible for remote or telework.

• Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies.
• Conducting vulnerability assessments using automated benchmarks and tools such as Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), and Security Content Automation Protocol (SCAP) Compliance Checker.
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides (STIGs).
• Performing security control continuous monitoring, reviewing system security plans and associated artifacts, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations.
• Providing guidance of cross-functional cybersecurity efforts ensuring alignment with organizational and program goals and milestones.
• Collaborating on documentation for Information System Authority to Operate (ATO) decisions, including SSPs, SOPs, POA&Ms, and Knowledge Articles.
• Conducting comprehensive risk assessments and vulnerability analyses to identify and mitigate potential threats to satellite communication infrastructures.
• Position may require flexibility in working hours.

This description outlines the general nature and scope of the role. Additional duties may be assigned as necessary.

Requirements

What You’ll Bring:

Required Qualifications:

• CompTIA Security + is required. Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related area of study is required. In lieu of a bachelor's degree, candidates must have 5 years of information system security officer / cybersecurity engineering experience in addition to a DoD approved baseline certification (i.e. CompTIA SecurityX, Cloud+, CCSP, etc.) as defined by DoDD 8140-M.

Preferred Qualifications:

• 5 years of experience with Information Assurance/Cybersecurity (IA/CS).
• 5 years of experience with Risk Management Framework (RMF) DODI 8510.01.
• Security controls and implementation delineated in Committee of National Security Systems Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG).
• Performing vulnerability assessments using Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated benchmarks.
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.
• Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Knowledge of the Intelligence Community Directive (ICD) 705, DoD 5205.07, and DOD 5205.07-M Volumes 1-4, Special Access Program (SAP) Policy, and the Joint Special Access Program Implementation Guide (JSIG).

Equally Important:

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self-directed work style with the ability to operate independently.
• Analytical thinker with proven problem-solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast-paced environment.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

Security Clearance Requirement:

• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Salary Range:

• The anticipated annual salary range for this position is $145,000 - $165,000, commensurate with an individual’s experience, qualifications, and skill set. ASEC is committed to providing fair and equitable compensation.

Who We Are:

ASEC offers meaningful, mission-driven work within a culture that supports your professional and personal growth. We partner with our government customers to deliver innovative solutions across engineering, information technology, training, and logistics. Above all, we are committed to doing what’s right for the Warfighter—plain and simple. Explore what makes ASEC different by visiting our website.

Why work at ASEC?

• 100% employee-owned company. Learn more about our Employee Stock Ownership Plan (ESOP) here!
• Comprehensive benefits package, including 11 paid holidays, medical/dental/vision coverage, HSA/FSA options, disability insurance, and more!
• 401(k) with company match
• Tuition assistance for undergraduate and graduate education
• Veteran-friendly employer
• Thriving employee culture

ASEC is an Equal Opportunity Employer. We recruit, hire, train, compensate, and promote employees based on qualifications, merit, and business needs, without regard to race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information, pregnancy or related conditions (including breastfeeding), or any other status protected by law.

ASEC also complies with all applicable pay transparency laws and will not discriminate against employees or applicants for inquiring about, discussing, or disclosing compensation.