Information System Security Officer (ISSO)

ASEC, Inc; Nevada (IA); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits package

Employee Stock Ownership Plan

401(k) with company match

Tuition assistance

Job summary

ASEC, Inc is seeking an Information System Security Officer based in NAS Fallon, NV. This on-site role is central to supporting a critical DoD program, involving the enforcement of security policies and conducting vulnerability assessments. Qualified candidates will bring extensive experience in information assurance and require an active DoD Top Secret clearance. ASEC offers a comprehensive benefits package and a collaborative work culture focused on meaningful mission-driven work.

Qualifications

• Bachelor's in Computer Science, Information Systems Management, Engineering, or related area preferred or 10 years of ISSO experience.
• At least 5 years in Information Assurance/Cybersecurity.
• Experience with RMF and vulnerability assessments.

Responsibilities

• Propose and enforce information system security policies.
• Conduct vulnerability assessments using automated tools.
• Perform continuous monitoring and risk analysis.

Skills

Information Assurance/Cybersecurity

Risk Management Framework (RMF)

Vulnerability assessments

Security controls implementation

Analytical thinking

Education

Bachelor's in Computer Science or related field

Tools

ACAS

DISA STIG

SCAP Compliance Checker

SolarWinds

Splunk

Job description

Description

Location: NAS Fallon, NV

Security Clearance Requirement: Top Secret with SCI eligibility

Telework Eligible? No - 100% On-Site

What You’ll Do

As an Information System Security Officer, you will play a key role in supporting a high-visibility DoD program. In this role, you’ll help shape and enforce the information system security policies, standards, and methodologies that keep our mission-critical systems protected. Are you ready to make an impact?

As the ISSO, you will provide mission-critical support by:

• Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies.
• Conducting vulnerability assessments using automated benchmarks and tools such as Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), and Security Content Automation Protocol (SCAP) Compliance Checker.
• Utilizing SolarWinds or Splunk to perform advanced system monitoring, security event analysis, and continuous compliance activities.
• Implementing operating systems and network devices security configuration in accordance with DISA approved STIGs.
• Performing security control continuous monitoring, reviewing system security plans and associated artifacts, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations.
• Providing guidance of cross-functional cybersecurity efforts ensuring alignment with organizational and program goals and milestones.
• Collaborating on documentation for Information System Authority to Operate (ATO) decisions, including SSPs, SOPs, POA&Ms, and Knowledge Articles.
• Conducting comprehensive risk assessments and vulnerability analyses to identify and mitigate potential threats to satellite communication infrastructures.
• Position may require flexibility in working hours.

This description outlines the general nature and scope of the role. Additional duties may be assigned as necessary.

What You’ll Bring

• Bachelor's in Computer Science, Information Systems Management, Engineering, or a related, technical area of study preferred. Without a bachelor's degree, 10 years of experience as an ISSO will be required.

At least 5 years of experience in the following areas is required:

• Information Assurance/Cybersecurity (IA/CS).
• Risk Management Framework (RMF) DODI 8510.01.
• Security controls and implementation delineated in CNSSI 1253, NIST SP 800-53, and JSIG.
• Performing vulnerability assessments using ACAS, DISA STIG, SCAP, and automated Benchmarks.
• Implementing operating systems and network devices security configuration in accordance with DISA STIGs.
• Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and NIAP certified technologies and the DISA APL.
• Knowledge of ICD 705, DoD 5205.07, and DOD 5205.07-M Volumes 1-4, SAP Policy, and JSIG.

Equally Important

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self-directed work style with the ability to operate independently.
• Analytical thinker with proven problem-solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast-paced environment.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

Certification Requirements

• Candidates must hold a current IAM-II certification (e.g., CompTIA CASP+ CE, CISM, CISSP) as defined by DoD 8570.01-M. Please upload copies of any relevant IT certifications as part of your application. These documents help us verify qualifications during the initial screening process.

Security Clearance Requirement

• This position requires U.S. citizenship and an active DoD Top Secret clearance with SCI eligibility. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Who We Are

ASEC offers meaningful, mission-driven work within a culture that supports your professional and personal growth. We partner with our government customers to deliver innovative solutions across engineering, information technology, training, and logistics. Above all, we are committed to doing what’s right for the Warfighter—plain and simple. Explore what makes ASEC different by visiting our website.

Why work at ASEC?

• 100% employee-owned company. Learn more about our Employee Stock Ownership Plan (ESOP) here.
• Comprehensive benefits package, including 11 paid holidays, medical/dental/vision coverage, HSA/FSA options, disability insurance, and more!
• 401(k) with company match
• Tuition assistance for undergraduate and graduate education
• Veteran-friendly employer
• Thriving employee culture

Not the right opportunity for you? Send this job posting to a friend!

ASEC is an Equal Opportunity Employer. We recruit, hire, train, compensate, and promote employees based on qualifications, merit, and business needs, without regard to race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information, pregnancy or related conditions (including breastfeeding), or any other status protected by law.

ASEC also complies with all applicable pay transparency laws and will not discriminate against employees or applicants for inquiring about, discussing, or disclosing compensation.