Information Systems Security Officer (ISSO)

X-Bow Launch Systems Inc.; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

X-Bow Launch Systems Inc. in Huntsville seeks an Information Systems Security Officer (ISSO) with 3–5 years of experience to oversee the security posture of our information systems.

You will implement security controls, coordinate with system administrators, perform risk assessments, manage vulnerabilities, and support incident response efforts, ensuring compliance with NIST/ISO frameworks.

Active Secret clearance and a relevant degree are required; candidates with certifications are preferred.

Qualifications

• Active Secret US Government clearance required.
• 3–5 years of direct information security experience.
• Bachelor's degree or equivalent work experience.
• Strong knowledge of network security, IAM, and patch management.
• Certifications preferred (e.g., Security+, CySA+, CISSP).

Responsibilities

• Maintain compliance with security standards, policies, and procedures.
• Coordinate vulnerability scans and remediation with system admins.
• Update System Security Plans (SSP) and POA&Ms, maintain security documentation.
• Monitor access controls, perform reviews, and audit logs.
• Assist Incident Response team during security incidents and investigations.

Skills

Network security principles

Firewalls

IDS/IPS

IAM

Vulnerability management

SIEM

NIST SP 800-37/53

ISO/IEC 27001

SOC 2

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Nessus

Qualys

Rapid7

Splunk

Microsoft Sentinel

eMass

Job description

Position Title: Information Systems Security Officer (ISSO) Experience Level: Mid-Level (3–5 years) Department: Security Reports To: Senior FSO/ISSM Location: Huntsville Job Type: Full-Time

Job Summary

We are seeking a highly motivated and detail-oriented Information Systems Security Officer (ISSO) with 3 to 5 years of experience to join our security team. In this role, you will be responsible for ensuring the operational security posture of our information systems. You will play a critical role in maintaining compliance with industry standards, conducting risk assessments, managing vulnerabilities, and supporting incident response efforts.

Key Responsibilities

Security Compliance & Governance: Maintain and enforce information security policies, standards, and procedures. Ensure all assigned systems comply with relevant regulatory and organizational requirements.

Risk & Vulnerability Management: Coordinate and conduct regular vulnerability scans, analyze results, and collaborate with system administrators to ensure timely patching and remediation.

System Security Plans (SSP): Hands-on experience updating control implementation statements, tracking POA&Ms (Plans of Action and Milestones), and maintaining security documentation within eMass.

Access Control & Monitoring: Monitor user access controls, perform periodic access reviews, and audit system logs to detect unauthorized activities or policy violations.

Incident Response Support: Assist the Incident Response team during security incidents, helping to contain, investigate, and document breaches or anomalies.

Required Qualifications

Clearance: Must have an active Secret US Government Clearance. Please note US Citizenship is required to maintain a Secret Clearance.

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (equivalent work experience will be considered).

Experience: 3 to 5 years of direct experience in an information security role (e.g., ISSO, Security Analyst, or Security Administrator).

Technical Knowledge:

Solid understanding of network security principles, firewalls, intrusion detection/prevention systems (IDS/IPS), and Identity and Access Management (IAM).

Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and SIEM platforms (e.g., Splunk, Sentinel).

Practical knowledge of at least one major security framework, such as NIST SP 800-37/53, ISO/IEC 27001, CIS Controls, or SOC 2.

Certifications: Active security certification is highly preferred (e.g., CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), or Certified Information Systems Security