Information Systems Security Officer (ISSO)

Intellect Solutions LLC; Acer Lane (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

Intellect Solutions LLC is seeking an Information Systems Security Officer (ISSO) to ensure security for assigned information systems while adhering to FBI guidelines. This role involves monitoring security measures, granting access based on user clearance, and developing security policies.

Candidates must have 5 years of cybersecurity experience, an active Top Secret clearance, and a CISSP certification. Familiarity with security tools like Nessus and IBM Guardium is essential.

Qualifications

• 5 years of work experience in cybersecurity related field, preferably as an ISSO.
• Active Top Secret Clearance required.
• Current CISSP certification required.

Responsibilities

• Maintain security for assigned information systems.
• Ensure compliance with security policies as outlined by the FBI.
• Manage user access and training for security responsibilities.
• Develop and enforce information systems security policies.

Skills

Cybersecurity experience

Security tool operation

User identification management

Risk assessment

Education

Bachelors or Advanced Degree in Computer Science, Cybersecurity, Mathematics, or Engineering

Tools

Nessus

IBM Guardium

HP WebInspect

NMAP

Job description

Information Systems Security Officer (ISSO)

• Full-time
• Security Clearance: Active Top Secret required

Responsibilities

• Ensuring that day to day security is maintained for assigned information systems
• Ensuring all Information Systems (ISs) are operated, maintained, and disposed of in accordance with security policies and practices outlined in the FBI's Information System Security Assessment (ISSA) Handbook and NIST publication series NIST 800-53
• Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before they are granted access to the IS
• Initiate protective and corrective measures when a security incident or vulnerability is discovered
• Monitor system recovery processes and ensure the proper restoration of an IS security features
• Ensure Configuration Management (CM) for security-relevant IS software, hardware, and firmware is documented and maintained
• Support certification activities throughout the ISSA process (previously known as Certification and Accreditation process)
• Ensure that system security requirements are complied with, unless waived during all phases of the system lifecycles
• Establish audit trails and ensure the review, and make them available, when required, to the Chief Security Officer (CSO) or the Information System Security Manager (ISSM)
• retain audit logs in accordance with Department of Justice (DOJ), Office of Director of National Intelligence (ODNI) and/or FBI policy
• Ensure awareness and precautionary measures are exercised to prevent introduction and/or proliferation of malicious code; manage review and release of media and/or memory components
• Ensure general users and privileged users are trained in the specific knowledge needed for them to safely operate and maintain the ISs to which they have access, including general security awareness and specialized privileged user training
• Disseminate, control, and manage the issuance of user identifications and passwords for assigned ISs, and provide authorized lists to appropriate system administrators
• Develop, implement, and enforce information systems security policies
• Maintain System Security Plans (SSPs) and all other system security documentation
• Development of other required system plans: Configuration Management Plan (CMP), Contingency Plan (CP), Continuity of Operations (COOP) and Disaster Recovery Plan (DRP) (as required), and Incident Response Plan (IRP)
• Support risk assessment and evaluation activities throughout the Certification and Accreditation (C&A) or site accreditation process
• Able to implement and maintain continuous monitoring
• Establish audit trails, ensuring the review and reporting all identified security findings

Qualifications

• 5-years work experience in cyber security related field, preferably as an ISSO, required
• Active Top Secret Clearance required
• Current CISSP certification required
• Experienced using and operating security tools such as, but not limited to: Tenable’s Nessus and/or Security Center, IBM Guardium, HP WebInspect, or similar applications, and Network Mapper (NMAP)
• A Bachelors or Advanced Degree in Computer Science, Cybersecurity, Mathematics, or Engineering is highly desirable

All your information will be kept confidential according to EEO guidelines.