Information Systems Security Officer (ISSO)

VulnU; Colorado Springs (CO); On-site; USD 104,000 - 181,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

401(k)

Life insurance

Flexible schedules

Holidays

Job summary

Parsons is seeking an Information Systems Security Officer (ISSO) in Colorado Springs, on-site, for mission-critical DoD/IC systems with TS/SCI + Poly clearance. You will manage RMF/JSIG activities, maintain SSP/SCTM/RAR artifacts, and lead security audits and continuous monitoring for Collateral, SCI, and SAP environments.

The role requires a Bachelor’s degree in CS/Engineering/Cybersecurity and at least 8 years of related experience, strong knowledge of NIST standards, and collaboration with

Qualifications

• Bachelor's degree in a relevant field and 8+ years in DoD/IC security roles.
• Experience guiding systems through RMF steps (Prepare to Monitor).
• Experience with IA frameworks, CI/CD security, and cloud/on-prem environments.

Responsibilities

• Utilize JMSSIG/RMF to obtain and maintain ATO/IATT/ATC for IS in scope.
• Develop and maintain SSP, SCTM, RAR, ConMon, SAR, and POA&M artifacts.
• Coordinate security audits and continuous monitoring activities.

Skills

Networking concepts

RMF/JSIG/SSP development

NIST 800-53 controls

Security monitoring

System accreditation

Education

Bachelor's Degree in CS/Engineering/Cybersecurity

Tools

STIGs

ACAS

HBSS Trellix

eMASS

Xacta

Job description

# Information Systems Security Officer (ISSO)Parsons · parsons.comCategory: GRC & ComplianceLocation: US - CO, Colorado SpringsSalary: $103,500 – $181,100Clearance: TS/SCI + PolyIn a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible. Job Description:Parsons has emerged as a leader in the development of cutting-edge solutions for the Department of War and Intelligence Community. Our tremendous success can be attributed to our people and our priorities. We hire the best; we make them a priority, and we never lose focus on the mission. It’s why we’re here. We have built this cultural legacy by working closely with analysts and operators to understand their needs and deliver meaningful value through innovative, cost effective and intuitive software solutions. Our Space Operations Program Directorate is passionate about making America the undisputed leader in Space because we understand that ensuring our nation’s security for future generations depends on it. Parsons creates game changing space solutions by teaming highly respected subject matter experts with brilliant technologists. Do you want to be part of a team that is helping the government solve major national security challenges in the space domain? We need your help. Our team is looking for an Information Systems Security Officer (ISSO). In this role you will get to focus on the cybersecurity aspects of system design to deal with cyber-related disruptions, minimizing misuse and malicious behavior, while supporting Department of War agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Duties:Utilize Joint Special Access Program Implementation Guide (JSIG) /Risk Management Framework (RMF) to achieve and maintain Authorization to Operate (ATO), Interim Authorization to Test (IATT), and Authority to Connect (ATC) for all existing and new Information Systems (IS) that require accreditation to include on premise and cloud platforms.Maintain and develop System Security Plans (SSP), Security Controls Traceability Matrices (SCTM), Risk Assessment Reports (RAR), Continuous Monitoring Plans (ConMon), Security Assessment Reports (SAR), and Plan of Actions and Milestones (POA&M).Ability to produce and maintain documentation, policy, and procedures such as: Ports Protocols and Services Management (PPSM) worksheets, system and network diagrams / descriptions, and SOPs.Coordinate and perform security audits and system updates to identify nonstandard events and maintain system and information integrity.Play an active role in conducting continuous monitoring activities on Accredited Information Systems (AIS) its environment of operation to include developing and updating the system artifacts.Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundariesReport Cyber incidents or vulnerabilities to the ISSM and/or government chain of commandRequired Skills:Knowledge of computer networking concepts and protocols, and network security methodologies; risk management processes (e.g., methods for assessing and mitigating risk); Information Technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption); network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)Experience in reviewing and implementing secure configuration management techniquesPractical experience in guiding systems through NIST SP 800-37 RMF steps, from Prepare to Monitor, using CNSSI 1253 to ascertain appropriate Confidentiality, Integrity, and Availability levels, and the NIST SP 800-53 controls associated with each levelExperience with Enterprise Mission Assurance Support Service (eMASS) and XactaMust have a Bachelors Degree in Computer Science/Engineering/Cybersecurity or other relevant Engineering field from an accredited university with minimum 8 years of experience. Additional experience may be considered in lieu of degree.Top Secret (TS) security clearance with eligibility for Secret Compartmented Information (SCI)Willingness to submit to a Counterintelligence polygraph to achieve SAP security Clearance upon hirePossess a DoD 8140.03/8570.01 Information Assurance Manager II certification: CompTIA Security (Sec ), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner Plus (CASP )Knowledge of and hands on experience with Security Technical Implementation Guides (STIGs), Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS) / TrellixMust have the ability to work in a dynamic environment and effectively interact with numerous DoD, military/civilian personnel, and industry partnersWorking knowledge of Microsoft Office (Word, PowerPoint, and Excel)100% onsite is required in Colorado Springs, CO Desired Skills: Knowledge of cyber tools such as Splunk, Security Information and Event Management (SIEM) systems, vulnerability detection, scripting languages, and/or programming languagesKnowledge of Cloud Computing such as Amazon AWS, and Microsoft Azure platformsKnowledge of DEVOPS / DEVSECOPS operations and requirementsSecurity Clearance Requirement:An active Top Secret SCI security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $103,500.00 - $181,100.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!