Information System Security Officer (ISSO) - Chantilly VA

VetJobs; Chantilly (VA); On-site; USD 104,000 - 218,000; Full time

Job summary

CAC I International Inc. in Chantilly, Virginia, is seeking an Information System Security Officer (ISSO) to support ICAM initiatives within MWIII Bridge.

The role focuses on security architecture, RMF accreditation, and continuous monitoring across systems, with travel up to 10% locally. The ISSO will guide the team through SSP, ATOs, and system security plan development, ensuring compliance and robust security posture for ICAM deployments.

Qualifications

• TS/SCI clearance with polygraph.
• IAM Level 1 CWIP certification or baseline certification.
• Bachelor's degree in a technical discipline with 10 years of experience.

Responsibilities

• Prepare SSP and assist in obtaining ATOs.
• Develop RMF artifacts: system architecture, risk assessments, POA&Ms, data flows.
• Work with ISSM and DAOs to maintain accreditation.
• Apply continuous monitoring to evaluate security posture.
• Oversee software patch implementation and enforcement of security policies.
• Review Audit Logs weekly.
• Perform weekly data transfers to Ft. Meade.
• Maintain assessment and authorization statuses.
• Support PRIVAC requests and extensions.

Skills

ISSO experience

Security architecture

RMF process

Communication with stakeholders

Education

High School/GED

Bachelor's degree in technical discipline

Tools

ACAS/Nessus

Jira

Job description

Job Title

Information System Security Officer (ISSO)

Job Category

Security

Time Type

Full time

Minimum Clearance Required to Start

TS/SCI with Polygraph

Employee Type

Regular

Percentage of Travel Required

Up to 10%

Type of Travel

Local

The Opportunity

CACI as a Prime Contractor on MWIII Bridge. All positions in the Hanover, MD area. MWIII Bridge develops and supports Identity, Credential and Access Management (ICAM) capabilities for the enterprise and stand‑alone deployment throughout the IC. Tasks include program management, mission support, software integration, software development, system engineering, migration, testing, documentation development, network and system monitoring, configuration control and release management.

Responsibilities

The candidate will be responsible for security architecture and systems engineering supporting ICAM projects. The ISSO will provide guidance to the team to support system accreditation (IATT and ATO).

ISSO Tasks Include

• Prepare system security plan (SSP) and provide recommendations to assist in obtaining ATOs.
• Identify, develop (either directly, or in coordination with applicable experts), review and incorporate common artifacts found in an RMF accreditation package such as: system architecture and boundaries, hardware and software lists, risk assessment reports, POA&Ms, data flows, and other necessary system, network, and application documentation.
• Work with ISSM and DAOs to ensure systems obtain and maintain accreditation.
• Verify package submissions have met the threshold for approval such as: C&A Package for System Reauthorization, SAR Findings, CTO’s, POA&Ms, and System Security Plans (SSPs).
• Apply continuous monitoring techniques to evaluate the systems security posture.
• Create tasking for developers and system administrators as changes and patching are required.
• Oversee the implementation of software patches to maintain the security posture of the organization.
• Responsible for implementing and enforcing information systems security policies, standards, and methodologies.
• Familiarity with the use of vulnerability scanning and assessment tools (e.g., ACAS/Nessus) necessary to identify and document compliance.
• Review Audit Logs on a weekly basis.
• Perform Data transfers on a weekly basis driving from CACI Hanover Office to Ft. Meade.
• Maintain and report assessment and authorization statuses and issues in accordance with organizational guidance.
• Understand the PRIVAC process. Support personnel with new PRIVAC requests and extensions.

Auto req ID

483577BR

Minimum Education Required

High School/GED

Preferred Education

Bachelors

Required

• TS/SCI clearance with polygraph
• This position has been designated as requiring IAM Level 1 CWIP certification and requires one of the following baseline certifications to qualify
• CAP, CND, Cloud+, GSLC, Security+CE, HCISPP, CASP+CE, CISM, CISSP (or Associate), CCISO
• Bachelor's degree in a technical discipline from an accredited college or university
• Ten (10) years relevant work experience. Four (4) years of additional experience may be substituted for a bachelor's degree.
• At least four (4) years of this experience must be as an ISSO on programs and contracts of similar scope, type, and complexity.

Desired

• Experience with:
• The ICD 503/NIST 800-53 certification and accreditation process
• The Risk Management Framework
• Developing and maintaining SSPs
• IAVA review and handling
• Interpreting Security Scan results
• Interfacing with System Administrators and Software Engineers
• Task tracking systems (e.g. Jira, Redmine, ServiceNow)

Understands

• Public Key Infrastructure-based authentication
• A variety of security policies, especially within the IC
• Fundamentals of technical security risk assessment
• Understands how to perform analysis of alternatives
• Able to clearly communicate ideas and status updates to management and other stakeholders

The Proposed Salary Range For This Position Is

$103,800 - $218,100

City

Chantilly

State

Virginia

Job Category (Engineering)

Engineering

Job Code

Engineering Engineering

Affiliate Sponsor

CACI International Inc

Salary Range

$>100,000