Information System Security Officer ISSO

Open Systems Technologies Corporation; Chantilly (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Open Systems Technologies Corporation in Maryland is seeking a Senior Information System Security Officer (ISSO) to support a large software development program. You’ll develop and enforce security policies, maintain the IA posture, and coordinate with the ISSM on risk mitigation and certification activities.

The ideal candidate has 10+ years ISSO experience, DoD 8570 IAT II/IAM II, an FS poly within the last 6 years, experience with IAVA management, SSP development, and strong interpersonal

Qualifications

• Must have at least 10 years of ISSO experience in secure information systems.
• Must have at least 5 years of experience using tools to support IAVA management.
• Must have at least 5 years of experience with SSPs and security documentation.
• Experience with security tools, encryption techniques, and secure architectures.
• Experience implementing information systems security policies and DoD 8570 compliance.
• Strong initiative, team player, and excellent interpersonal skills.
• FS poly required within past 6 years; CCAs not allowed.

Responsibilities

• Provide support for implementing and enforcing information systems security policies and standards.
• Assist in evaluating security solutions meeting security requirements for processing information.
• Assist with Configuration Management for security software, hardware, and firmware.
• Analyze threats and implement incident detection, reporting, and vulnerability remediation.
• Maintain records on systems and upgrades; ensure operational security posture.
• Provide support to ISSM for maintaining IA posture of systems/enclaves.
• Develop and update system security plans and IA documentation.
• Support IAVA management and security scans; apply patches and updates.

Skills

ISSO experience

Security operations

Threat analysis

Incident response

Team collaboration

Interpersonal skills

Education

Bachelor's degree in a related field

DoD 8570 IAT II / IAM II

Tools

IAVA management tools

SSP documentation tools

Job description

Open Systems Technologies Corporation is a leader in the government contracting marketplace, providing Enterprise Security and Cloud Computing solutions to support large organizations. Our capabilities include supplying federal government entities and private businesses with software development, scientific and engineering technical assistance, systems integration, and enterprise security. Since its founding in 1996, OST has been committed to delivering high-quality, best-in-class results that bring added value to our clients while investing in our employees’ futures by providing exciting projects to work on and robust benefits to include technical training and certifications, relocation assistance, and a 401K match with immediate vesting.

We are looking for an Information System Security Officer (ISSO) to work at our Annapolis Junction, MD, location. This is an exciting opportunity to use your experience to support an important, fast-paced, mission-critical program. The selected candidate will act as an ISSO for a large software development program that includes software maintenance and development, IT support (Network/Workstation/Server), systems integration and life cycle support, enterprise application development, network engineering, and information systems security (ISS). They will work with other security professionals in developing and implementing strategies to detect and mitigate threats to information systems, protect critical data sets, and provide assessments of system and network vulnerabilities. They will analyze threats and develop and implement best practices methodologies for incident detection, reporting, and vulnerability remediation.

Senior Information System Security Officer (ISSO)??

Primary Roles and Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing multiple types of information.
• Assist with the Configuration Management for information system security software, hardware, and firmware.
• Analyze threats and develop and implement best practice methodologies for incident detection, reporting, and vulnerability remediation.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Evaluate security solutions to ensure they meet security requirements for processing information.
• Maintain operational security posture for information systems.
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system/program/enclave.
• Develop and maintain documentation for Certification & Accreditation in accordance with specified policies.
• Develop and update system security plans and other IA documentation.

• Provide support for Information Assurance Vulnerability Alerts (IAVAs) management (initiating IAVA responses and system security scans, completing remediation, extending IAVA patches and security updates to designated sites, etc.).

• Provide CM for security-relevant information system software, hardware, and firmware.
• Develop system security policy and ensure compliance.
• Administer the user identification and authentication mechanisms of the Information System.

Basic Qualifications

• Must have at least 10 years of experience as ISSO working independently, and/or on teams maintaining secure information system operations in isolated, connected and standalone environments.
• Must have at least 5 years of experience using tools to support IAVA management.
• Must have at least 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security related documentation.
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques/tools.
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements.
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
• Demonstrated experience performing day-to-day security operations of large, complicated information and information processing systems.
• Must be committed to developing and adhering to best practices.
• Must possess a high level of self-initiative and must be a solutions-oriented team player.
• Must have excellent interpersonal skills.
• Must have an FS poly, last poly must be within the past 6 years, and no CCAs

Preferred Qualifications

• Bachelor's degree in a related field and at least 12 years of relevant experience.
• Extensive experience as an Information Systems Security Officer on large software development and integration programs.
• DoD 8570 compliance with IAT Level II or higher.
• DoD 8570 compliance with IAM Level II or higher.

BENEFITS

OST is an Equal Opportunity Employer and has been operating since 1996 providing support on various contracts with Government agencies. We offer a comprehensive benefits package that includes 3 weeks paid time off, 11 Federal Holidays, medical/dental coverage, STD, LTD, Life Insurance, AD&D, 401k with up to 4% match, and end-of-year profit sharing.