Information System Security Officer (ISSO)

Open Systems Technologies Corporation; Maryland; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

3 weeks paid time off

11 Federal Holidays

Medical and dental coverage

STD, LTD, Life Insurance, AD&D

401k match with immediate vesting

Job summary

Open Systems Technologies Corporation seeks an experienced Information System Security Officer (ISSO) for our Annapolis Junction, MD location. The ISSO will lead efforts across security policy, SSPs, and vulnerability remediation within a large software development program.

The role requires substantial ISSO experience, DoD 8570 guidance compliance, and strong collaboration with ISSM and security teams to maintain secure operations and effective incident response.

Qualifications

• 10+ years ISSO experience in secure information system operations.
• 5+ years using tools to support IAVA management.
• 5+ years of experience preparing, maintaining, and managing SSPs and security documentation.
• Experience with security evaluations of software/systems and enforcing security policies.
• FS poly recently and no CCAs, DoD 8570 compliance preferred.

Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in configuration management for information system security software, hardware, and firmware.
• Analyze threats and develop best practice methodologies for incident detection and remediation.
• Maintain records on hardware, software, routers, firewalls, and network devices.
• Maintain operational security posture for information systems.
• Support ISSM in maintaining the appropriate operational IA posture.
• Develop and update system security plans and IA documentation.
• Support IAVA management and patching across designated sites.

Skills

ISSO experience

IAVA management

SSP documentation

Security policies enforcement

Threat analysis

Configuration management

IA posture

Interpersonal skills

DoD 8570 compliance

Education

Bachelor's degree in a related field

Job description

Open Systems Technologies Corporation is a leader in the government contracting marketplace, providing Enterprise Security and Cloud Computing solutions to support large organizations. Our capabilities include supplying federal government entities and private businesses with software development, scientific and engineering technical assistance, systems integration, and enterprise security. Since its founding in 1996, OST has been committed to delivering high-quality, best‑class results that bring added value to our clients while investing in our employees’ futures by providing exciting projects to work on and robust benefits to include technical training and certifications, relocation assistance, and a 401K match with immediate vesting.

We are looking for an Information System Security Officer (ISSO) to work at our Annapolis Junction, MD, location. This is an exciting opportunity to use your experience to support an important, fast‑paced, mission‑critical program. The selected candidate will act as an ISSO for a large software development program that includes software maintenance and development, IT support (Network/Workstation/Server), systems integration and life cycle support, enterprise application development, network engineering, and information systems security (ISS). They will work with other security professionals in developing and implementing strategies to detect and mitigate threats to information systems, protect critical data sets, and provide assessments of system and network vulnerabilities. They will analyze threats and develop and implement best practices methodologies for incident detection, reporting, and vulnerability remediation.

• Senior Information System Security Officer (ISSO)??

Primary Roles And Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing multiple types of information.
• Assist with the Configuration Management for information system security software, hardware, and firmware.
• Analyze threats and develop and implement best practice methodologies for incident detection, reporting, and vulnerability remediation.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Evaluate security solutions to ensure they meet security requirements for processing information.
• Maintain operational security posture for information systems.
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system/program/enclave.
• Develop and maintain documentation for Certification & Accreditation in accordance with specified policies.
• Develop and update system security plans and other IA documentation.
• Provide support for Information Assurance Vulnerability Alerts (IAVAs) management (initiating IAVA responses and system security scans, completing remediation, extending IAVA patches and security updates to designated sites, etc.).
• Provide CM for security-relevant information system software, hardware, and firmware.
• Develop system security policy and ensure compliance.
• Administer the user identification and authentication mechanisms of the Information System.

Basic Qualifications

• Must have at least 10 years of experience as ISSO working independently, and/or on teams maintaining secure information system operations in isolated, connected and standalone environments.
• Must have at least 5 years of experience using tools to support IAVA management.
• Must have at least 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security related documentation.
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques/tools.
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements.
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
• Demonstrated experience performing day-to-day security operations of large, complicated information and information processing systems.
• Must be committed to developing and adhering to best practices.
• Must possess a high level of self-initiative and must be a solutions-oriented team player.
• Must have excellent interpersonal skills.
• Must have an FS poly, last poly must be within the past 6 years, and no CCAs

Preferred Qualifications

• Bachelor's degree in a related field and at least 12 years of relevant experience.
• Extensive experience as an Information Systems Security Officer on large software development and integration programs.
• DoD 8570 compliance with IAT Level II or higher.
• DoD 8570 compliance with IAM Level II or higher.

Benefits

OST is an Equal Opportunity Employer and has been operating since 1996 providing support on various contracts with Government agencies. We offer a comprehensive benefits package that includes 3 weeks paid time off, 11 Federal Holidays, medical/dental coverage, STD, LTD, Life Insurance, AD&D, 401k with up to 4% match, and end-of-year profit sharing.