Information System Security Officer - ISSO

American Systems; Carlsbad, Northern (CA, KY); Hybrid; USD 160,000 - 180,000; Full time

Job summary

AMERICAN SYSTEMS in Carlsbad, CA, is hiring an Information System Security Officer (ISSO) to oversee the security posture of assigned information systems and networks, ensuring compliance, operations, and mission readiness. The ISSO serves as a cybersecurity advisor to leadership and security stakeholders.

You will develop SSPs and SCTMs, maintain ATO/ATC, support RMF processes, coordinate audits, and assist with risk management.

Qualifications

• Active TS clearance with SCI and/or SAP eligibility.
• 5 years of information systems management and cybersecurity experience.
• Proficient in firewall administration, IDS/IPS, encryption.
• Familiarity with RMF, NIST SP 800-53 and DoD 8510.01.
• Experience in secure network configuration in classified environments.

Responsibilities

• Maintain the appropriate operational security posture for IS and networks per IA SOP.
• Develop SSPs and SCTMs.
• Advise ISSM, PSO, and DAO on security matters.
• Maintain ATO and ATC and RMF compliance.
• Prepare POAMs and remediation plans; coordinate audits.
• Conduct cybersecurity audits and maintain records.

Skills

TS clearance

SCI/SAP eligibility

Firewall admin

IDS/IPS

Encryption

RMF compliance

NIST SP 800-53

DoD 8510.01

Windows/Linux admin

Executive briefing

Job description

Overview

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training.

As the Information System Security Officer (ISSO), you will be responsible for maintaining the security posture of assigned information systems and networks while ensuring they remain compliant, operational, and mission ready. This role serves as a key cybersecurity advisor to leadership and security stakeholders, helping protect systemconfidentiality, integrity, and availabilitywhile supporting accreditation, deployment, sustainment, and ongoing risk management activities.

Responsibilities

• Maintain the appropriate operational security posture for assigned Information Systems (IS)and networks in accordance with cybersecurity policies, directives, and Information Assurance (IA) Standard Operating Procedures (SOP).
• Develop and maintain System Security Plans (SSP) and Security Control Traceability Matrices (SCTM)
• Ensure the Confidentiality, Integrity, and Accessibilityof all IS resources, organic to the supported organization, maintain a high level of operational availability.
• Serve as the principle technical advisor to the Information Systems Security Managers (ISSM), Program Security Officers (PSO), and Delegated Authorizing Officials (DAO).
• Perform functional duties, as the alternate ISSM, to maximize operational readiness and effectiveness.
• Provide expertise, to maintain the Authority to Operate (ATO) and Authorization to Connect (ATC) for assigned IS, ensuring Risk Management Framework (RMF)compliance.
• Provide the organization, subject matter expertise to prepare for cybersecurity, physical and personnel security assessments from senior management.
• Perform cybersecurity assessments for IS, within your area of responsibility, on a regular and consistent basis to identify potential vulnerabilities, evaluate the effectiveness of existing security controls, and ensure compliance with relevant policies and regulations.
• Develop supporting documentation, such as Plan of Action and Milestones (POA&M) and inspection reports, to coordinate events, capture discrepancies, and document remediation strategy for supported organizations.
• Develop and integrate policy and procedures to reinforce Access Controls (AC) for identified vulnerabilities.
• Participate in professional engagements with supporting and supported organizations, for successful collaboration, and to ensure assigned projects deliver desired results.
• Develop and maintain IS documentation to capture changes to the system, its operating environment, and to advise the Configuration Control Board (CCB) on ATO/ATC conflicts.
• Conduct cybersecurity audits and maintain audit record management, ensuring audit records are collected, reviewed, documented, and archived.
• Complete necessary, initial/annual, training to establish and maintain access to supported systems and networks.

Qualifications

• 5 years of information systems management and cybersecurity experience.
• Active TS clearance with SCI and/or SAP eligibility.
• Proficient in firewall administration, intrusion detection systems, anti-virus software, and data encryption.
• Familiarity with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management
• In-depth knowledge of information security principles and practices, including NIST SP 800-53 controls, DoD Risk Management Framework (RMF), and DoD Instruction 8510.01.
• Experience with cybersecurity RMF compliance and regulatory requirements.
• Working knowledge with Microsoft Windows operating systems (workstation & server), Linux, and system virtualization in a secure network environment.
• Strong analytical, problem-solving, and decision-making skills.
• Strong communication skills, adept at briefing executives andprogram IPT level leadership.
• Self-starter, strong work ethic, and willingness to be a contributing IPT member.

Pay Transparency Statement

AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $160,000.00/Yr. - USD $180,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status