Information Systems Security Officer, Staff

AMERICAN SYSTEMS; Middletown (RI); On-site; USD 90,000 - 130,000; Full time

Job summary

AMERICAN SYSTEMS in Middletown, RI seeks an Information System Security Officer (ISSO) to provide information assurance support for government networks and systems. You will develop security documentation, support RMF/ATO processes, and coordinate with stakeholders to maintain accreditation readiness.

The ideal candidate has 2-4 years of related experience, a Secret clearance, and familiarity with security controls, risk management, and incident response in federal environments.

Qualifications

• 2-4 years of experience in information assurance or cybersecurity.
• Secret clearance.
• CSWF certification preferred.
• Experience supporting DoD or federal information assurance programs, including ATO package support.
• Familiarity with security scanning, compliance validation, system hardening, and audit support.
• Experience supporting incident response, vulnerability management, and continuous monitoring activities.

Responsibilities

• Supports and implements security requirements within the organization’s processes and systems.
• Prepare security documentation using RMF, Xacta, and accreditation processes.
• Lead meetings and cross-functional discussions to communicate security status, risks, and remediation progress.
• Develop and maintain Security Test & Evaluation (ST&E) plans, ensuring STIGs and POA&Ms are applied.
• Provide certification and accreditation support, updating security plans and contingency plans.
• Conduct risk and vulnerability assessments and recommend mitigations.
• Analyze policies and system implementations against laws, regulations, and standards; identify gaps and actions.
• Recommend enhancements to address security deficiencies and oversee secure configuration practices.
• Conduct security program audits and develop remediation strategies.

Skills

Information Security

RMF

Vulnerability Management

Audit Support

Tools

JIRA

Confluence

Xacta

Job description

Overview

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training.

We are seeking anInformation System Security Officer (ISSO)to provide technical and programmatic Information Assurance support for customers in support of network and information security systems. This role is responsible for independently executing day-to-day information assurance and cybersecurity compliance activities for assigned systems, including security documentation, vulnerability assessment support, audit readiness, and implementation of security requirements.

The ISSO will support certification and accreditation efforts, conduct security assessments, develop required security documentation, evaluate compliance with applicable laws and regulations, and recommend improvements to strengthen the organization’s cybersecurity posture. The ideal candidate will be a strong communicator who can effectively partner with technical and program stakeholders, facilitate discussions, and support coordination across the security lifecycle.

Responsibilities

• Supports and implements security requirements within the organization’s business processes and system environments.


• Prepare security documentation using accepted frameworks and guidelines, including RMF, Xacta, and related accreditation processes.


• Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress, and to drive alignment and timely resolution of identified issues.


• Develop and maintainSecurity Test and Evaluation (ST&E) plans, ensuring the implementation of SecurityTechnicalImplementationGuides (STIGs), and PlanofActionandMilestones (POA&Ms).


• Provide certification and accreditation support, including developing, updating and maintaining security plans (SPs) and contingency plans.


• Conduct complex risk assessments and vulnerability assessments and recommend mitigation strategies.


• Analyze policies, procedures, and system implementations against applicable federal laws, regulations, and security standards; identify gaps and recommend corrective actions.


• Recommend system enhancements and corrective actions to address security deficiencies.


• Oversee secure configuration practices, guides implementation and validation of security tools, reviews compliance scan results, advise stakeholders on remediation priorities, and evaluates products and administrative practices for security impact and enterprise suitability


• Conduct security program audits and develop remediation strategies to reduce identified risks.


• Perform vulnerability assessments and track remediation through resolution.


• Develop strategies to support compliance with privacy, risk management, and e-authentication requirements.


• Provide information assurance support for the development and implementation of security architectures to address new and evolving requirements.


• Evaluate, develop, and enhance security policies, requirements, and tools.


• Support computer security incident investigations and response activities.

Qualifications

• 2-4 years of experience in related field.


• Secret clearance.


• Advanced cybersecurity certifications such as CISSP, CASP+, or CISM are a plus.


• CSWF certificationpreferred.


• Experience supporting DoW or federal information assurance programs, including Authorization to Operate (ATO) package support.


• Familiarity with security scanning, compliance validation, system hardening, and audit support.


• Experience supporting incident response, vulnerability management, and continuous monitoring activities.

Desired Skills

• Knowledge of risk management and security control assessment methodologies.


• Evaluate products and support various aspects of system administration from a security perspective.


• Experience with security tools, vulnerability scanning platforms, and compliance reporting.


• Understanding of security architecture principles and secure system configuration practices.


• Ability to effectively use JIRA and Confluence to document security activities, track findings and remediation actions, manage workflow, and coordinate with developers, program managers, and other stakeholders.


• Ability to manage multiple priorities and support deadlines in a regulated environment.


• Strong analytical, documentation, and problem-solving skills.

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status