Information System Security Officer - Topsecret

Parsons; Herndon (VA); On-site; USD 104,000 - 181,000; Full time

Benefits offered by this job

Medical care

Dental care

Vision care

Paid time off

401(k)

Life insurance

Flexible work schedules

Job summary

Parsons seeks an experienced Information System Security Officer to support a Defense/CISA portfolio managed service provider contract. This mid-level role requires a highly autonomous, TOP SECRET-cleared cybersecurity professional who will serve as the cybersecurity point of contact and ISSO/ISSE for key information systems within cleared environments.

You will drive RMF activities from design through continuous monitoring, develop vulnerability remediation plans, and maintain authorization

Qualifications

• Active TOP SECRET security clearance.
• U.S. citizenship and eligibility to maintain clearance.
• Bachelor's degree in cybersecurity, information assurance, information systems engineering, computer science, or related field; equivalent experience may be accepted.
• At least 5+ years of relevant cybersecurity, information assurance, systems security engineering, or IT experience.
• Eligibility for enrollment in the DCSA Personnel Assurance Program.
• Current DoD 8570/8140 IAT III certification (e.g., Security+, SSCP, GSEC).
• Experience owning cybersecurity, RMF, and compliance activities for DoD/federal systems as ISSO.
• Experience with RMF assessment/authorization documentation (SSP, SAR, POA&M).

Responsibilities

• Drive RMF activities for assigned information systems.
• Design and implement system continuous monitoring plans.
• Perform vulnerability management and POA&M management.
• Serve as the key point of contact for system reporting to ISO/ISSM and leadership.
• Work across multiple systems and competing priorities.
• Collaborate with stakeholders to identify challenges and implement solutions.
• Maintain System Security Plans, Security Assessment Reports, and other authorization artifacts.
• Support security monitoring, incident response, and RMF workflows.

Skills

TOP SECRET clearance

U.S. citizenship

5+ years cybersecurity experience

Independent worker

DoD 8570/8140 IAT III

RMF knowledge (NIST 800-37/53)

Education

Bachelor's in cybersecurity or related field

Tools

eMASS

Splunk Enterprise Security

Splunk SOAR

AWS

Azure Government

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

We are seeking an experienced Information System Security Officer to support a Defense Counterintelligence and Security Agency Portfolio Acquisition Executive managed service provider contract. This mid-level role requires a highly autonomous, TOP SECRET-cleared cybersecurity professional who will serve as the cybersecurity point of contact and ISSO/ISSE for key information systems within cleared environments.

You will help protect systems supporting national security programs and own the security posture of assigned systems throughout the system lifecycle—from design and authorization through continuous monitoring and ongoing operations. You will ensure systems remain compliant, monitored, appropriately documented, and prepared for security assessments and authorization activities.

You will drive Risk Management Framework activities from end to end, validate system security requirements, develop and assess security control implementations, design continuous monitoring strategies, and manage vulnerabilities from identification through remediation. You will document and track findings through Plans of Action and Milestones and support the preparation and maintenance of authorization artifacts, including System Security Plans and Security Assessment Reports.

This role requires between 50% and 100% on-site support in Herndon, Virginia, or Hanover, Maryland, including work in Sensitive Compartmented Information Facility environments as mission priorities require.

What You'll Be Doing:

• Drive Risk Management Framework (RMF) activities for assigned information systems

• Design and implement system continuous monitoring plans

• Perform vulnerability management, drive remediation with system stakeholders, and manage Plans of Action and Milestones (POA&Ms)

• Serve as the key point of contact for system reporting and communications to the ISO, ISSM, and customer leadership, as applicable, delivering excellent customer support

• Work proactively across multiple systems and competing priorities

• Collaborate and adapt to support the success of the broader team and the Mission.

• Collaborate with stakeholders to identify challenges and implement solutions

What Desired Skills You'll Bring:

• Active TOP SECRET security clearance.

• U.S. citizenship and continued eligibility to maintain the required security clearance.

• Bachelor's degree in cybersecurity, information assurance, information systems engineering, computer science, or a related field; equivalent professional experience may be accepted in lieu of a degree.
• At least 5+ years of relevant cybersecurity, information assurance, systems security engineering, or information technology experience.
• Eligibility for enrollment in the DCSA Personnel Assurance Program.

• Current DoD 8570/8140 Information Assurance Technical Level II certification, such as CompTIA Security+, SSCP, GSEC, or another qualifying certification.

• Demonstrated ability to work independently, interact directly with customers and technical stakeholders, and serve as an escalation point for cybersecurity and compliance issues.

• Experience owning cybersecurity, RMF, and compliance activities for DoD or other federal government information systems in an ISSO capacity.

• Experience designing, architecting, validating, or implementing security controls for DoD or federal government information systems in an ISSE capacity.

• Direct experience developing, reviewing, or maintaining RMF assessment and authorization documentation, including:

• Experience with System Security Plans, Security Assessment Reports, Security control implementation statements, Continuous monitoring plans, Risk assessments, Plans of Action and Milestonesand Authorization decision support packages.

• Working knowledge of the NIST Risk Management Framework, including NIST SP 800-37 and NIST SP 800-53.

• Experience supporting vulnerability management, remediation planning, risk acceptance, and POA&M management.

What Desired Skills You'll Bring:

• EPrior experience serving as an ISSO or ISSE in a DoD or DCSA environment.

• Experience supporting Tier 3 system RMF activities for federal cloud-based systems.

• Working knowledge of Amazon Web Services and Microsoft Azure Government environments, including cloud security architecture, planning, design, and operations.

• Experience securing systems hosted in classified, government, or hybrid cloud environments.

• Experience with eMASS or a comparable governance, risk, and compliance platform.

• Familiarity with systems security engineering documentation, such as: Cybersecurity strategies, Program Protection Plans, Information Support Plans, Security architecture and engineering documentation.
• Experience with security information and event management platforms, particularly Splunk Enterprise Security.

• Familiarity with security orchestration, automation, and response platforms, including Splunk SOAR.

• Experience supporting security monitoring, incident response, or Security Operations Center operations.

• Experience developing or validating security monitoring and incident-detection use cases.

• Knowledge of network security, system security, security logging, and event-monitoring requirements.

• Experience engineering or assessing cross-domain solutions, system interconnections, or trusted relationships between external systems.

• DoD 8570/8140 IAT Level III or an equivalent advanced certification.

• Professional cybersecurity certification, such as CISSP, CASP+, CISM, or equivalent.

• AWS or Microsoft Azure certification, such as AWS Certified Solutions Architect, AWS Certified Security, Azure Solutions Architect Expert, or Azure Security Engineer Associate.

• Splunk certifications or accreditation in Splunk Enterprise Security, IT Service Intelligence, User Behavior Analytics, SOAR, or Splunk Cloud.

Security Clearance Requirement:

An active Top Secret security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $103,500.00 - $181,100.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.