Information Systems Security Officer (ISSO) 2

Base-2 Solutions; Hanover (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

Base-2 Solutions is seeking an Information Systems Security Officer (ISSO) II to support information assurance, cybersecurity operations, security documentation, and RMF-based authorization for information systems. The role emphasizes policy enforcement, risk assessment, and CM across system hardware, software, and firmware.

Ideal candidates hold DoD 8570 IAM Level I certifications and an active Top Secret/SCI with Full Scope Polygraph, with eight-plus years of experience in IT/cybersecurity or

Qualifications

• Experience in IT, cybersecurity or security authorization as per equivalency pathway.
• Familiarity with security tools, encryption methods, and PKI concepts.

Responsibilities

• Support information assurance program for a program, organization, system, or enclave.
• Coordinate and enforce information systems security policies and standards.
• Maintain operational security posture and ensure policies are followed.
• Assist management of security aspects and daily security operations.
• Evaluate security solutions to meet requirements for processing classified information.
• Perform vulnerability/risk analysis to support security authorization.
• Provide CM for information systems security software, hardware, and firmware.
• Manage changes to the system and assess security impact.
• Prepare SSPs, Risk Assessment Reports, C&A packages, and SRTMs.
• Support RMF-based security authorization activities.
• Assist ISSOs in implementing and enforcing policies and documentation.
• Track and maintain system security documentation and user authentication mechanisms.
• Obtain system authorization for ISs under purview.

Skills

Security tools

Encryption tools

PKI

Communication protocols

Education

Bachelor's degree in CS/ Cyber Security/ IT Eng

12 years experience without Bachelor's

Job description

Position Summary

Base-2 Solutions is seeking an Information Systems Security Officer (ISSO) 2 to support information assurance, cybersecurity operations, security authorization, configuration management, and security documentation for information systems, programs, or enclaves.

Essential Duties and Responsibilities

• Provide support for a program, organization, system, or enclave's information assurance program.


• Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.


• Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.


• Assist with the management of security aspects of the information system and perform day-to-day security operations of the system.


• Evaluate security solutions to ensure they meet security requirements for processing classified information.


• Perform vulnerability/risk assessment analysis to support security authorization.


• Provide configuration management (CM) for information systems security software, hardware, and firmware.


• Manage changes to system and assess the security impact of those changes.


• Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).


• Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).


• Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards, and methodologies.


• Assist with preparation and maintenance of documentation.


• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information.


• Assist with Configuration Management (CM) for information system security software, hardware, and firmware.


• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.


• Propose, coordinate, and implement information systems security policies, standards, and methodologies.


• Develop and maintain documentation for Security Authorization in accordance with ODNI and DoD policies.


• Provide CM for security-relevant information system software, hardware, and firmware.


• Ensure compliance with system security policy.


• Provide support to the information System Security Manager (ISSM) for maintaining the appropriate operational Cybersecurity posture for a system, program, or enclave.


• Develop and update the system security plan and other Cybersecurity documentation.


• Track and ensure appropriate user identification and authentication mechanism of the information System (IS).


• Obtain system authorization for ISs under their purview.


• Plan and coordinate implementation of IT security programs and policies.


• Manage and control changes to the system assessing the security impact of those changes.


• Provide daily oversight and direction to contractor ISSOs.


• Interact with customers, IT staff, and high-level corporate officers to define and achieve required Cybersecurity objectives.

Required Qualifications

• Work-related experience in the fields of IT, cybersecurity or security authorization meeting an applicable education and experience pathway in the equivalency section.


• Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation; communication protocols; or encryption tools and techniques.


• Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.

Preferred Qualifications

• None specified.

Required Education and Experience Equivalency

• Bachelor's degree in Computer Science, Cyber Security or IT Engineering with Eight (8) years of combined work-related experience in the fields of IT, cybersecurity or security authorization.


• No bachelor's degree with Twelve (12) years of combined work-related experience in the fields of IT, cybersecurity or security authorization (8 years plus 4 additional years in lieu of a Bachelor's degree).

Required Certifications

• DoD 8570 IAM Level I certification required – one of: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP.

Required Security Clearance

• Active Top Secret/SCI with Full Scope Polygraph

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo