Information System Security Officer (ISSO)

Intelligent Waves; Hill Air Force Base (UT); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

PTO and life insurance

Tuition assistance and training

Job summary

Intelligent Waves seeks an Information System Security Officer (ISSO) to support DoD Special Access Programs (SAPs). The ISSO will maintain the security posture of given information systems, coordinating with the ISSM, ISSE, and ISO.

Key duties include RMF/JSIG-compliant documentation, continuous monitoring, incident handling, and daily onsite work. Responsibilities cover POA&M management, STIG compliance, and security assessments across Collateral, SCI, and SAP environments.

Qualifications

• Bachelor's degree, or four years of additional relevant experience in lieu of a degree.
• Five or more years of ISSO or equivalent information assurance experience.
• Working knowledge of the Risk Management Framework and the system authorization process.
• Demonstrated experience developing and maintaining authorization documentation.
• Ability to communicate security requirements clearly to both technical and non-technical stakeholders.

Responsibilities

• Assist the ISSM in executing information system security duties and responsibilities.
• Prepare, review, and update system authorization packages.
• Maintain security control documentation and continuous monitoring artifacts in accordance with RMF and JSIG requirements.
• Track and manage POA&M through closure.
• Conduct continuous monitoring activities for authorization boundaries under assigned purview.
• Perform security impact assessments and coordinate changes with the ISSM and AO/DAO.
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Support STIG compliance, vulnerability scanning, and remediation coordination with system owners and administrators.
• Notify the ISSM when changes occur that may affect the authorization determination of assigned information systems.
• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Monitor system recovery processes to verify security features are functioning correctly.
• Execute the cybersecurity portion of the self-inspection and review of system assessment plans.
• Identify cybersecurity vulnerabilities and assist with countermeasure implementation.
• Support incident handling, containment, and reporting with the ISSM.

Skills

ISSO experience

RMF knowledge

Authorization documentation

Education

Bachelor's degree or equivalent experience

Tools

N/A

Job description

Position Overview

Intelligent Waves is seeking a Information System Security Officer (ISSO) to support Special Access Programs (SAPs) within Department of Defense (DoD) environments. The ISSO will maintain the operational security posture of assigned information systems while working closely with the ISSM, ISSE, and ISO. Responsibilities include day-to-day system security operations, authorization documentation, configuration management, security impact assessments, incident handling, and security awareness while supporting Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments.

Location

This position may be based at Eielson AFB, Alaska, Hill AFB, Utah, or Eglin AFB, Florida. One position will be filled. Candidates are evaluated on qualifications rather than site preference, and the position will be established at the location of the selected candidate. The selected candidate will be assigned to a single site and must be located to perform daily onsite work. This is not a rotational or multi-site resident position.

Travel

Up to 50% – travel is may be required based on mission requirements, including contingency and surge operations. All authorized travel will be reimbursed in accordance with GSA Per Diem rates and the Department of War Joint Travel Regulations (JTR).

Clearance Requirement

TS/SCI

Intelligent Waves delivers mission-focused multi-domain operational expertise and innovation to the Government through high-impact technology solutions in cybersecurity, data science, enterprise network & systems engineering, software development, and cognitive human performance.

ANYTIME. ANYWHERE. ANY DOMAIN.

Since 2006, we have proudly served federal agencies including the Department of Defense. Our ability to operate globally in a wide range of environments, coupled with our deep understanding of customer needs and requirements, enables us to provide cost-effective solutions that support some of the nation's most complex and mission-critical objectives.

Adherence to all customer site protocols is mandatory for employees.

What You Will Do

• Assist the ISSM in executing information system security duties and responsibilities.
• Prepare, review, and update system authorization packages.
• Maintain security control documentation and continuous monitoring artifacts in accordance with applicable Risk Management Framework (RMF) and JSIG requirements.
• Track and manage Plans of Action and Milestones (POA&M) through closure.
• Conduct continuous monitoring activities for authorization boundaries under assigned purview.
• Perform security impact assessments and coordinate any changes or modifications to hardware, software, or firmware with the ISSM and AO/DAO prior to implementation.
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Support STIG compliance, vulnerability scanning, and remediation coordination with system owners and administrators.
• Notify the ISSM when changes occur that may affect the authorization determination of assigned information systems.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Ensure audit records are collected, reviewed, and documented, including any anomalies.
• Monitor system recovery processes to verify that security features and procedures are properly restored and functioning correctly.
• Ensure all information system security documentation is current and accessible to properly authorized individuals.
• Execute the cybersecurity portion of the self-inspection, including security coordination and review of all system assessment plans.
• Identify cybersecurity vulnerabilities and assist with the implementation of countermeasures.
• Support incident handling, containment, and reporting in coordination with the ISSM.
• Prepare reports on the status of security safeguards applied to information systems.
• Perform ISSO duties in support of in-house and external customers.
• Assist Department of Defense, national agency, and contractor organizations with the development of assessment and authorization (A&A) efforts.
• Attend required technical and security training relative to assigned duties, including operating system, networking, and security management topics.

Required Qualifications

• Bachelor's degree, or four years of additional relevant experience in lieu of a degree.
• Five or more years of ISSO or equivalent information assurance experience.
• Working knowledge of the Risk Management Framework and the system authorization process.
• Demonstrated experience developing and maintaining authorization documentation.
• Ability to communicate security requirements clearly to both technical and non-technical stakeholders.

Certifications

• Must meet position and certification requirements outlined in DoD 8140 for Information Assurance Technician Level II or Information Assurance Manager II within six months of the date of hire.

Benefits

Intelligent Waves offers a generous benefits package including medical, dental, vision, paid PTO, life and disability insurance. We invest in our employees' futures by contributing with vesting starting from DAY 1, technical training, tuition bonuses, and much more.

Clearance Statement

Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, Intelligent Waves will consider only applicants with current security clearances or those eligible to obtain one.

Equal Employment Opportunity

Intelligent Waves is an equl opportunity employer. We are committed to providing equal opportunity to all applicants and employees in full compliance with all applicable state and federal laws prohibiting discrimination based on race, color, age, sex, religion, national origin, disability, military and/or veteran status, or any other class protected by applicable state or federal law.
As an affirmative action and equal opportunity employer, Intelligent Waves is committed to the full inclusion of all qualified candidates and employees. If you need reasonable accommodations for any part of the application or interview process, or to perform essential job functions, please contact [e-mail].

A Veteran-Friendly Organization

#IW
#CJ

• Bachelor's degree, or four years of additional relevant experience in lieu of a degree.
• Five or more years of ISSO or equivalent information assurance experience.
• Working knowledge of the Risk Management Framework and the system authorization process.
• Demonstrated experience developing and maintaining authorization documentation.
• Ability to communicate security requirements clearly to both technical and non-technical stakeholders.

Certifications

• Must meet position and certification requirements outlined in DoD 8140 for Information Assurance Technician Level II or Information Assurance Manager II within six months of the date of hire.
• Assist the ISSM in executing information system security duties and responsibilities.
• Prepare, review, and update system authorization packages.
• Maintain security control documentation and continuous monitoring artifacts in accordance with applicable Risk Management Framework (RMF) and JSIG requirements.
• Track and manage Plans of Action and Milestones (POA&M) through closure.
• Conduct continuous monitoring activities for authorization boundaries under assigned purview.
• Perform security impact assessments and coordinate any changes or modifications to hardware, software, or firmware with the ISSM and AO/DAO prior to implementation.
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Support STIG compliance, vulnerability scanning, and remediation coordination with system owners and administrators.
• Notify the ISSM when changes occur that may affect the authorization determination of assigned information systems.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Ensure audit records are collected, reviewed, and documented, including any anomalies.
• Monitor system recovery processes to verify that security features and procedures are properly restored and functioning correctly.
• Ensure all information system security documentation is current and accessible to properly authorized individuals.
• Execute the cybersecurity portion of the self-inspection, including security coordination and review of all system assessment plans.
• Identify cybersecurity vulnerabilities and assist with the implementation of countermeasures.
• Support incident handling, containment, and reporting in coordination with the ISSM.
• Prepare reports on the status of security safeguards applied to information systems.
• Perform ISSO duties in support of in-house and external customers.
• Assist Department of Defense, national agency, and contractor organizations with the development of assessment and authorization (A&A) efforts.
• Attend required technical and security training relative to assigned duties, including operating system, networking, and security management topics.