Information Systems Security Officer (ISSO) I

Pyramid Systems Inc; Oregon; Hybrid; USD 65,000 - 90,000; Full time

Job summary

Pyramid Systems Inc. is seeking an Information Systems Security Officer I (ISSO I) in Oregon to support security and compliance of information systems.

Under supervision, you will assist with authorization, continuous monitoring, and incident reporting across the system life cycle with collaboration from program managers and security engineers. You will help maintain System Security Plans, security documentation, and ensure proper handling of classified media and equipment.

Qualifications

• Performs routine information system security tasks under guidance of senior personnel and procedures.
• Assists with preparing and updating System Security Plans and authorization artifacts.
• Supports system authorization and continuous monitoring activities with evidence gathering and tracking.

Responsibilities

• Conducts or assists with vulnerability scans and documents findings.
• Monitors systems for compliance with security configurations and access requirements.
• Assists in reviewing changes for security impact and documentation.
• Supports user access reviews, audit logs, and security training records.
• Helps identify, document, and mitigate suspected security incidents.

Skills

Information security concepts

Vulnerability scanning

System authorization

Documentation

Security policy

Stakeholder communication

Education

Bachelor's degree in cybersecurity or related field

Job description

DescriptionJob Summary:

The Information Systems Security Officer I (ISSO I) supports the security and compliance of information systems and networks in accordance with applicable government, customer, and organizational requirements. Working under supervision, the ISSO I assists with system authorization activities, maintenance of System Security Plans and related documentation, security control implementation and assessment, vulnerability scanning, continuous monitoring, and incident reporting. The position collaborates with program managers, system administrators, security engineers, and internal and external customers throughout the system life cycle. The ISSO I also supports procedures for the protection, handling, and accountability of classified systems, media, and equipment and helps ensure that system changes are properly documented and reviewed.

RequirementsRequirements:

• Performs routine information system security tasks under the guidance of senior security personnel and established procedures.
• Assists with preparing, maintaining, and updating System Security Plans, security control documentation, risk assessments, Plans of Action and Milestones, and other authorization artifacts.
• Supports system authorization and continuous monitoring activities by gathering evidence, tracking documentation, and coordinating required updates.
• Conducts or assists with vulnerability scans, reviews results, documents findings, and supports remediation tracking and validation.
• Monitors assigned systems for compliance with approved security configurations, access requirements, and operating procedures.
• Assists with reviewing proposed hardware, software, configuration, account, and network changes for security impact and required documentation.
• Supports user account reviews, access authorization, security training records, audit log reviews, and other recurring security activities.
• Assists with identifying, documenting, reporting, and mitigating suspected security incidents in accordance with established procedures.
• Helps implement and maintain procedures for the protection, control, storage, transfer, and disposition of classified media and equipment.
• Communicates security requirements and findings to technical staff, program personnel, customers, and other stakeholders in a clear and professional manner.
• Maintains organized and accurate security records and provides status updates on assigned tasks, findings, and corrective actions.
• Keeps current on applicable cybersecurity requirements, organizational policies, and security tools relevant to assigned systems.
• Escalates complex, high-risk, or non-routine issues to senior security personnel or management.
• Knowledge of basic cybersecurity principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management.
• Working knowledge of information system security controls, authorization documentation, continuous monitoring, vulnerability management, and incident response concepts.
• Familiarity with government and Department of Defense cybersecurity and classified information system requirements applicable to the assigned environment.
• Basic knowledge of Windows and/or Linux operating systems, networks, user account administration, security configurations, audit logs, and common security tools.
• Ability to interpret and follow security policies, technical guidance, standard operating procedures, and customer requirements.
• Ability to prepare and maintain accurate security documentation, records, spreadsheets, reports, and system artifacts.
• Ability to identify routine security issues, gather relevant information, apply established procedures, and manage matters appropriately.
• Ability to use vulnerability scanning, endpoint security, log review, ticketing, collaboration, and standard office productivity tools.
• Ability to communicate technical and compliance information clearly in writing and verbally to technical and nontechnical audiences.
• Ability to manage multiple assignments, meet deadlines, maintain attention to detail, and work effectively with moderate supervision.
• Ability to protect sensitive and classified information and exercise sound judgment, discretion, and professional integrity.
• Ability to work collaboratively with cross-functional teams and respond professionally to customer and stakeholder requests.

Qualifications:

• Minimum of one year of relevant experience in information system security, cybersecurity, information technology, system administration, network administration, security compliance, or a related field.
• Bachelor's degree in cybersecurity, information technology, computer science, management information systems, or a related field; equivalent relevant education, training, certifications, and experience may be considered.
• Ability to obtain and maintain the security clearance and customer access required for the position.
• Baseline cybersecurity certification meeting contract or customer requirements is preferred or may be required within a specified period after hire.
• Prior exposure to security documentation, vulnerability scanning, system administration, networking, or compliance activities through employment, military service, internships, education, or hands‑on training is preferred.