Information Systems Security Officer (ISSO)

Mtsi Va; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

The Information Systems Security Officer (ISSO) at MTSI in Huntsville, AL will work with the ISSM and ISO to monitor information systems, maintain security controls, and ensure authorization documentation remains compliant. The role emphasizes implementing configuration management, assessing security impacts, and coordinating with stakeholders to preserve system integrity.

You will prepare, review, and update authorization packages, monitor for changes, and document audit records while

Qualifications

• Bachelor’s degree in a technical field; minimum 5 years in related roles (ISSO, System/Network Admin).
• Minimum Level II DoW 8570/8140 IAT certification (e.g., Security+, SSCP, CySA+, GSEC).
• Active Secret clearance with TS/SAP experience is highly desired.
• Experience with RMF, NIST SP 800-53, and related security controls.

Responsibilities

• Implement configuration management across authorization boundaries.
• Prepare, review, and update authorization packages.
• Monitor and maintain security controls and documentation.
• Coordinate hardware/software updates with ISSM/AO/DAO prior to implementation.
• Conduct periodic reviews to verify compliance with the authorization package.

Skills

Cybersecurity principles

Security compliance

RMF

Education

Bachelor's degree in IT/CS/Info Assurance

Tools

eMASS

ACAS

SCAP

SIEM

PPS

Job description

MTSI is currently seeking to hire an Information Systems Security Officer (ISSO) to join the team in Huntsville, Alabama.

The ISSO will collaborate closely with the ISSM and ISO to monitor information system(s), maintain security controls, and ensure compliance with authorization documentation.

Responsibilities

• Responsibilities also include implementing configuration management across authorization boundaries, assessing the security impact of those changes, and making recommendations to the ISSM.
• Responsibilities Assist the ISSM in meeting their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
• Notify the ISSM of any changes that may affect the authorization determination of the information system(s).
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Coordinate changes or modifications to hardware, software, or firmware of the system with the ISSM and AO/DAO prior to implementation.
• Monitor system recovery processes to verify proper restoration of security features and procedures.
• Maintain current and accessible IS security-related documentation for authorized personnel.
• Collect, review, and document audit records, including any anomalies.
• Attend technical and security training relevant to assigned duties (e.g., operating system, networking, security management).
• Execute the cybersecurity portion of the self-inspection, including providing security coordination and review of system assessment plans.
• Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties to support both in-house and external customers.
• Conduct security impact analysis activities and report them to the ISSM for all configuration management changes within the authorization boundaries.

Required Experience

Bachelor’s degree in a technical field (e.g. Information Technology, Information Assurance, Computer Science, or related discipline) is highly desired. Minimum 5 years of relevant experience with demonstrated performance in roles such as System Administrator, Network Administrator, or ISSO.

Required Certifications

• In accordance with DoW Directive 8570/8140 IAT, a minimum of a Level II certification (e.g., Security+, SSCP, CySA+, GSEC, CND, or GICSP).
• A computing environment or technical certification is encouraged (e.g., MCSA, Cisco CCNA, Linux+, etc.).

Required Clearance

Active Secret Clearance cleared for TS 2 years of experience with Special Access Programs (SAP) is highly desired.

Desired Qualifications

System IT/SA experience with IT systems is highly desired. Strong understanding of cybersecurity principles, practices, and industry standards. Experience, or knowledge with the A&A process, Configuration Management, Continuous Monitoring, Vulnerability Management, Patch Management, eMASS (or similar), ACAS (or similar), POA&Ms, STIGs, Evaluate-STIG and/or SCAP, SIEM software, Control SOPs, RMF, NIST SP 800-53, Security Plans, JSIG, NIST, FIPS, HW/SW list, PPS, Network Diagrams/Topologies is highly desired. Experience with DCSA, MDA, or DIA is highly desired.

#LI-AT1