Information Systems Security Officer

NexTech Solutions LLC; Gainesville (VA); Hybrid; USD 120,000 - 185,000; Full time

Job summary

NexTech Solutions LLC in Northern, VA seeks an ISSO to support enterprise and system-level cybersecurity engineering, planning and implementation of the information security program and ATO lifecycle. You will identify security risks, implement controls, and ensure compliance across IT applications while coordinating audits and security exercises.

The role requires 5+ years in ISSO with RMF/NIST 800-53, along with strong documentation, incident response, and project management skills.

Qualifications

• 5+ years of ISSO experience using RMF and NIST 800-53 guidelines
• 3+ years of project management experience
• Proficiency in writing technical analysis reports
• Bachelor’s degree in CS/IT/InfoSec or equivalent experience

Responsibilities

• Liaison to customer ISSO to support system authorization and ATO lifecycle
• Monitor vulnerability scans and remediate findings with engineers
• Develop and maintain System Security Plan and other security documentation
• Coordinate internal security audits and security exercises
• Develop and test incident response and contingency plans
• Oversee user provisioning and access enforcement
• Prepare MOUs/ISAs to support secure interconnections
• Support ongoing RMF/NIST 800-53 implementations

Skills

Fluency in English

Active Secret clearance

Education

Bachelor’s degree in computer science / information security

Tools

Xacta

Archangel

Nessus

Job description

The Opportunity

The ISSO, working closely with the customer’s ISSO, directly supports efforts to plan, coordinate and implement the information security program and system accreditation lifecycle. Responsible for enterprise and system-level cybersecurity engineering tasks. Identifies security risks and integrates required security controls as set forth by policy. Ensures security compliance of information technology applications. Responsible for monitoring security policies and procedures, coordinating internal security audits and security exercises, delivering required security training and participating in coordination meetings.

Brief Description

The Opportunity

The ISSO, working closely with the customer’s ISSO, directly supports efforts to plan, coordinate and implement the information security program and system accreditation lifecycle. Responsible for enterprise and system-level cybersecurity engineering tasks. Identifies security risks and integrates required security controls as set forth by policy. Ensures security compliance of information technology applications. Responsible for monitoring security policies and procedures, coordinating internal security audits and security exercises, delivering required security training and participating in coordination meetings.

Key Responsibilities (Principal Duties and Accountabilities *Essential Functions)

• Primary liaison to customer ISSO to support the system accreditation process and Authorization to Operate (ATO) efforts, audits, and reaccreditation cycles; Utilizes customer’s security governance tool for the system authorization and ATO lifecycle
• Working closely with engineers, utilizes vulnerability scanning tools and reports to track and remediate findings
• Evaluates and validates physical security to ensure support of systems security requirements
• Tracks and manages Plans of Action and Milestones (POA&M’s) that are out of compliance
• Supports NIST RMF implementation and documentation including annual security control review
• Coordinates and assists with internal security audits
• Develops and maintains security documentation such as the System Security Plan, system boundary diagram, inventory of hardware and software, ports and protocols, etc.
• Develops, coordinates and tests incident response plans, contingency plans and security tabletops/exercises
• Documents system parameters and ensure all security documents are kept current
• Asses proposed changes to information systems; identifies risks and impacts; Performs Security Impact Analysis (SIA) and submits change control requests for system enhancements to the ATO package
• Participates in new technology enhancements and implementations and its implication on the system boundary
• Assists in testing system function pre and post security control implementations
• Delivers annual compliance training as mandated by policy and regulatory standard
• Oversees user account provisioning, permission review, and access enforcement for system integrity
• Develops and maintains Memorandum of Understanding (MOUs) and Interconnection Service Agreements (ISAs) with internal organizations and external entities to support secure information system interconnections and data sharing
• Participating in special projects as required

Requirements

• Fluency in English (written and spoken)
• Must have active Secret or higher Security clearance

Education

• Bachelor’s degree in computer science, information technology or information security, or the equivalent combination of education and work experience

Required Skills, Experience & Abilities

• 5+ years of experience as an ISSO utilizing the RMF and NIST 800-53 guidelines
• 5+ years of experience in security engineering and information technology
• 3+ years of project management experience
• Proficiency in writing technical analysis reports

Preferred Qualifications

• Design and implementation of security solutions; Familiarity with security technology tools and applications for secure VPNs, Single Sign-on, Multi-Factor Authentications, etc.
• Proficient in all facets and implementation of the Risk Management Framework (RMF), NIST 800-53 and DISA STIGs
• Hands-on experience as an AISSO/ISSO driving successful system authorization and ATOs, and maintenance of system ATOs
• Hands-on experience utilizing an automated security governance tool (i.e., Xacta, Archangel, etc.)
• Certifications- CISSP, Security+, CASP+, CAP
• Information Assurance
• Cloud-based security principles
• Project management
• Agile methodology
• Nessus and other system vulnerability identification tools
• Strong problem solving, analytic, and oral/written communication skills
• Ability to work well independently under pressure and time constraints, in a small team environment

Physical Demands & Work Environment

The physical demands and work environment described are representative of those that an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Capable of lifting and moving information technology equipment up to 50 pounds
• Ability to work occasional evenings and/or weekends as job duties demand
• Ability to travel domestically and internationally up to 10% of the time, which may include extended periods of standing, walking, or navigating airports and government facilities.
• Professional office environment with standard office equipment (computers, phones, printers).

Summary

• Hybrid position in Northern, VA

Compensation

The base salary range for this position is $120,000 - $185,000. Actual compensation will be determined based on factors including relevant experience, qualifications, skills, location, and internal equity.

Benefits

NexTech Solutions offers a comprehensive benefits package designed to support employees and their families, including competitive health, dental, and vision coverage, retirement savings options, paid time off, and additional employee benefits.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. NTS will also consider qualified applicants with criminal histories consistent with relevant laws for employment.

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email [e-mail]