Information Systems Security Officer (ISSO)

Engineering Services, LLC; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Engineering Services, LLC in Huntsville, AL seeks an Information Systems Security Officer (ISSO) to review, implement, update and document security policies, manage audits, conduct vulnerability assessments, and coordinate responses to incidents in a DoD-classified environment.

The ideal candidate will have at least three years of Security Analyst experience, knowledge of NIST controls, vulnerability assessments, and RMF activities; a Bachelor’s degree is preferred.

Qualifications

• Must have knowledge of cybersecurity principles and DoD requirements for classified environments.
• Experience with NIST security controls and regulations required.
• Experience conducting vulnerability audits and system configuration checks.

Responsibilities

• Review, implement, update and document security policies and procedures.
• Manage security audits, vulnerability and threat assessments.
• Direct responses to system intrusions and incident handling.
• Support RMF accreditation activities and site reaccreditation processes.
• Prepare and submit incident responses and maintain technical documentation.

Skills

Cybersecurity knowledge

NIST controls

Vulnerability assessments

Communication

Education

Bachelor's degree in CS/IS

High School Diploma or GED

Tools

Vulnerability scanners

RMF documentation tools

Job description

Overview

The Information Systems Security Officer (ISSO) will be responsible for reviewing, implementing, updating and documenting ESTS lab’s information, security policies and procedures, managing security audits, vulnerability and threat assessments, directing responses for system intrusions, and ensuring fulfillment of legal and contractual information security and privacy mandates, preventing and detecting intrusion.

Responsibilities

• Demonstrate a strong knowledge of cybersecurity principles and DoD requirements relevant to the confidentiality, integrity, availability and authentication of systems operating in a classified environment
• Ensure compliance with the Chapter 8 regulatory requirements of the with National Industrial Security Program Operating Manual (NISPOM)
• Applies current computer science technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems. Primary liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Support the development and maintenance of technical documentation and standard operating procedures (SOPs)
• Execute the security assessment and authorization process for Risk Management Framework (RMF) requirements
• Support the Security Manager with site accreditation/reaccreditation process
• Perform updates to Risk Management Framework accreditation documentation for assigned systems
• Prepare and submit classified spillages/incident responses
• Performs other duties as assigned

Qualifications

Education:

• High School Diploma or GED required; Bachelor's Degree preferred

Experience:

• Three years of relevant work experience as a Security Analyst to include; developing, editing, and auditing cyber security policies, plans, and procedures for government systems and programs
• Knowledge and experience working with NIST security controls and regulations required
• Experience conducting vulnerability audits, security configuration checks, and system configuration scans to meet Cyber Security requirements required

Any combination of education/experience may be substituted for job requirements at the recommendation of the hiring manager and approval of the COO or higher.