Information Systems Security Officer III

Parallax Advanced Research; Beavercreek (OH); In loco; USD 90.000 - 140.000; Tempo pieno

Descrizione del lavoro

Parallax Advanced Research Corporation is seeking an Information Systems Security Officer III to protect customer information systems and guide security posture across the system lifecycle. The role collaborates with ISSMs, system owners, engineers, assessors, and providers to translate security requirements into actionable steps.

Responsibilities include leading RMF/A&A activities, updating security plans, managing POA&Ms, and coordinating with program leadership.

Competenze

• Active TS/SCI clearance and ability to maintain it.
• 5+ years of cybersecurity or information assurance experience with ISSO/ISSE RMF and authorization responsibilities.
• DoD 8140 workforce qualification as required by the contract (e.g., Security+ CE).
• Experience developing and maintaining authorization packages, supporting assessments, and managing POA&Ms.
• Knowledge of NIST SP 800-37/800-53 and customer cybersecurity requirements.
• Experience with governance, risk, and compliance platforms (eMASS, Xacta).
• Ability to interpret vulnerability findings and security controls across Windows/Linux/network/cloud environments.
• Strong technical writing, analytical, organizational, and communication skills.
• Ability to travel up to 15 percent.

Mansioni

• Lead RMF and A&A activities, prepare and maintain authorization packages.
• Develop and maintain System Security Plans and security procedures.
• Maintain system boundaries, asset records, and control documents.
• Prepare risk recommendations and status reports for authorities.

Conoscenze

TS/SCI clearance

RMF/A&A

5+ years cybersecurity

NIST SP 800-37/53

eMASS/Xacta

Security writing/communication

Travel 15%

Formazione

Bachelor's degree in cybersecurity/IT/CS

CGRC/CISSP/CISM/CCSP credential

Strumenti

eMASS

Xacta

Descrizione del lavoro

Position:Information Systems Security Officer III

Location: Beavercreek, OH

Remote Status: On-Site

Job Id:329

# of Openings:1

Parallax Advanced Research is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.

Effective Date

11-1-26

FLSA Status

Exempt

Employment Status

Full-Time

Work Location

On-Site

Position Summary

The Parallax Advanced Research mission is to deliver innovative research and provide technology, human, and business solutions through The Science of Intelligent Teaming for government, industry, and academic clients.

The Information Systems Security Officer (ISSO) III protects customer information systems and maintains their security posture across the full system lifecycle. This role turns security requirements into practical action, maintains authorization documentation, and helps technical teams identify, prioritize, and resolve cybersecurity risks. The ISSO III works closely with Information System Security Managers (ISSMs), system owners, administrators, engineers, assessors, and cybersecurity service providers, and explains security risks and remediation priorities clearly to technical teams and program leadership. This is an individual contributor position with no supervisory responsibilities.

Essential Duties and Responsibilities

The essential functions include, but are not limited to the following:

• Lead assigned Risk Management Framework (RMF) and Assessment and Authorization (A&A) activities, including preparing and maintaining authorization packages and supporting evidence.
• Develop and maintain System Security Plans, security control implementation statements, Plans of Action and Milestones (POA&Ms), diagrams, inventories, and supporting security procedures.
• Maintain accurate system boundaries, asset records, interconnection documentation, and shared or inherited control descriptions.
• Prepare risk recommendations, exception requests, and security status reports for the ISSM, system owner, and designated approval authorities.

Continuous Monitoring & Vulnerability Management

• Perform continuous monitoring, validate security control evidence, support assessments and inspections, and track authorization conditions and recurring deliverables.
• Analyze vulnerability scans and configuration assessments, including ACAS/Nessus, SCAP, and DISA STIG results, and work with technical owners to prioritize remediation and verify closure evidence.
• Review security logs, access controls, and configuration findings to identify risks and suspicious activity.

Configuration & Change Management

• Review proposed system, software, network, and cloud changes, document security impacts, and coordinate required reviews before implementation.
• Coordinate with engineering and operations teams to build security requirements into development, deployment, and sustainment activities.
• Report suspected incidents through approved channels and coordinate with the incident response team or Cybersecurity Service Provider (CSSP).
• Support incident documentation, evidence preservation, and corrective actions, and validate that required security controls and monitoring are restored after recovery.

Training, Compliance & Continuous Improvement

• Support security awareness and role-based training.
• Share knowledge with less experienced staff and improve the quality and consistency of security documentation.
• Follow all requirements for handling classified information and systems.
• Other duties as assigned.

Minimum Qualifications (Knowledge, Skills, and Abilities)

• Active TS/SCI clearance and the ability to maintain it.
• Five or more years of relevant cybersecurity or information assurance experience, including hands‑on ISSO, ISSE, or comparable RMF and authorization responsibilities.
• DoD 8140 workforce qualification for the assigned DCWF work role and proficiency level (for example, Security+ CE or higher), as required by the supported contract.
• Demonstrated experience developing and maintaining authorization packages, supporting assessments, and managing POA&Ms through remediation and closure.
• Working knowledge of NIST SP 800-37, NIST SP 800-53, and applicable customer cybersecurity requirements.
• Experience with eMASS, Xacta, or a comparable governance, risk, and compliance platform.
• Ability to interpret vulnerability findings, security configurations, technical diagrams, and security control evidence in Windows, Linux, network, or cloud environments.
• Strong technical writing, analytical, organizational, and communication skills, with the ability to manage competing priorities across multiple teams.
• Ability to travel up to 15 percent.

Preferred Qualifications (Knowledge, Skills, and Abilities)

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent experience where permitted by the customer contract.
• Advanced credentials such as CGRC, CISSP, CISM, or CCSP.
• Experience supporting classified, SCI, or SAP environments, including JSIG, ICD 503, or the DCSA Assessment and Authorization Process Manual (DAAPM).
• Experience supporting federal or defense systems, complex authorization boundaries, or multiple concurrent authorization packages.
• Experience with AWS GovCloud, Azure Government, cloud control inheritance, FedRAMP, or DevSecOps environments.
• Experience automating evidence collection, compliance reporting, or recurring security tasks.

Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodation may be provided to enable individuals with disabilities to perform the functions. On‑site work, including secure areas where personal electronic devices are not permitted, with conditional telework for unclassified work. Travel up to 15 percent.