Information Systems Security Officer

APOGEE RESEARCH LLC; Arlington (VA); On-site; USD 114,000 - 171,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid vacation

Sick leave

Paid holidays

Transit/parking support

Job summary

Apogee Research LLC in Arlington, VA is seeking an experienced Information System Security Officer (ISSO) to support DoD-level systems. The role is full-time and in-person, requiring an active DoD Top Secret clearance with SCI eligibility and a strong background in RMF, SSPs, and security controls.

You will oversee security policies, assess risk, audit logs, conduct training, coordinate with ISSM, CPSO/FSO, and program managers, and help maintain an approved security posture across classified

Qualifications

• 3-5 years as an ISSO/ISSE in DoD/Intelligence environment.
• Must hold DoD 8140/8570 baseline certification (e.g., Security+, CySA+, etc.).
• Experience auditing information systems.
• Familiarity with RMF, NIST SP 800-53/171 and related policies.
• Self-starter, multi-tasking under deadlines.
• Excellent written and oral communication; team oriented.

Responsibilities

• Ensure security policies/procedures for systems and data per DoD regs.
• Maintain SSPs, SCTMs, RMF artifacts and authorization packages.
• Support assessments of classified and Controlled Unclassified Information networks.
• Troubleshoot accounts, backups, file transfers, and security configurations.
• Identify vulnerabilities and implement countermeasures for secure resources.
• Coordinate RMF artifacts with PMs, ISSM, CPSO/FSO, and Government customers.
• Develop and maintain RMF Plan of Action and Milestones (POA&M).
• Review audit logs for anomalies and threats; conduct security training.

Skills

ISSO/ISSE experience

DoD RMF/NIST knowledge

Audit information systems

Certification/authorization knowledge

Strong communication

Education

DoD 8140/8570 baseline cert (Security+/CySA+, etc.)

Tools

Red Hat/STIGs experience

Windows Server

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Systems Security Officer

04 Professional Headquarters, Arlington, VA, US

Information Systems Security Officer (ISSO)

Apogee Research brings cutting-edge research into practice for the DoD community. We blend agility with rigor to develop new technologies and transition them into operational use. Founded in 2012, Apogee Research brings together cross-discipline teams to solve difficult and often deemed impossible problems across a range of different technical domains. At Apogee Research we work hard, we get things done, and we do it together.

Apogee Research is seeking an experienced, highly motivated, and organized Information System Security Officer (ISSO) with a demonstrated capability of working within executive-level DoD multi-level security environments.The ISSO reports directly to the Director of Operations and provides comprehensive information systems security support. This position will be responsible for our systems security by ensuring that operational security is maintained for the assigned information systems. This position requires working knowledge of secure Government enterprise level information systems and networks, isolated standalone networks, security policies, technical security safeguards, and operational security measures. This is an excellent opportunity for an energetic and experienced ISSO or ISSE who is conscientious, detail-oriented, and enjoys working with a close-knit team.

The position is based out of our Arlington, VA office (full-time in person). Candidates must have an active DoD Top Secret clearance with SCI eligibility.

Key Responsibilities:

• Ensure users follow established information security policies and procedures to protect, operate, maintain, and dispose of systems and data in accordance with internal security policies and Department of Defense (DoD) regulations.
• Interpret, review, maintain information Systems Security Plans (SSPs), Security Control Traceability Matrix (SCTM), Risk Assessment Reports, Security Control Assessment Reports, and authorizations in accordance with DoD mandated policies.
• Participate in and support assessments of various classified and Controlled Unclassified Information networks.
• Troubleshoot user accounts and network issues, perform backups, assist with Assured File Transfers, ensure the integrity of security configurations, and the removal of decommissioned information systems.
• Identify information systems vulnerabilities, recommend and or implement countermeasures for controlled and secure network resources.
• Develop a comprehensive Risk Management Framework (RMF) package including SSPs, Enterprise Sub-System packages, Information Continuous Security Monitoring Plans, and Body of Evidence to support system authorization in coordination with Program Managers, Information Systems Security Manager, and Government Customer Security Control Accessors.
• Review and analyze system audit logs to identify anomalous activity and potential threats to controlled and secure network resources.
• Conduct and monitor cyber awareness and information systems training sessions for company employees.
• Perform security audits on all systems assigned to validate proper use.
• Coordinate with program stakeholders, the ISSM, Contract Program Security Officer (CPSO)/Facility Security Officer (FSO), IT Manager and team members to define, implement and maintain an acceptable information systems security posture.
• Provide support to the ISSM in reporting, responding to, and investigating security violations and incidents.
• Participate in and support incident response drills and change configuration board.
• Develop and maintain a Plan of Action and Milestones (POA&M) for all security related vulnerabilities and provide recommendations to the ISSM on correcting vulnerabilities associated with required security controls.

Qualified candidates should have:

• 3-5 years as an ISSO or ISSE within the Intelligence or DoD Environment
• Required to hold and maintain DoD 8140/8570 approved baseline certification (e.g., Security+, CySA+, etc.)
• Experience with auditing information systems.
• Experience with certification/authorization requirements as outlined in the NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev 4/5, NIST SP 800-171, DoD STIG Overlays, and other USG IS/Security-related policies.
• Self-starter, highly motivated, able to multi-task and meet tight deadlines. A strong candidate must have the ability to work well under pressure and deal with changing priorities.
• Excellent communication skills (oral and written), ability to work in a team environment, and must work well with others.
• Effective at problem-solving and proven ability to cope with conflict, stress and crisis situations.

Strongly Preferred

• Experience implementing security controls on Red Hat, other Linux distributions and Windows based operating systems in accordance with applicable Security Technical Implementation Guides (STIGs) and NIST 800-53 controls.
• Knowledge and experience with technical and configuration standards relating to information system security; prefer experience configuring Windows Server operating systems, system virtualization and other related peripherals.
• Experience with developing security policies and procedures (e.g. data transfer procedures, audit procedures, media protection policy, configuration management procedures, etc.

Pay Information:

At Apogee Research we believe individuals should be compensated according to the value they bring to our organization and we want to ensure we evaluate candidates at their appropriate level. The levels for this role are included below:

• $114,133 - $171,200
• I’m awesome and your range doesn’t apply to me.

About Apogee Research

Apogee Research offers a comprehensive benefits package that includes health, dental, vision, life, and disability insurance, FSAs, paid vacation, sick leave, and paid holidays. Conveniently located in Arlington, VA, we are a short walking distance from the Ballston Metro station. We offer the choice of paid garage parking or a contribution towards a transit account.

Apogee Research, LLC is proud to be an Equal Employment Opportunity and Aff…