InfoSec Officer II: Security Monitoring & Compliance

Draper Labs; Reston (VA); On-site; USD 82,000 - 220,000; Full time

Job summary

Draper is looking for an Information System Security Officer 2 (ISSO 2) to support continuous monitoring and authorization efforts for multiple classified systems under the ISSM. You will perform cyber security duties including physical/security training, incident handling, and SSP updates.

Ideal candidates have 3–5 years of relevant experience, a bachelor's in IT, and IAM I/IAT II certification or higher. Requires TS//SCI with Polygraph; base salary range is shown in posting.

Qualifications

• Bachelor's degree in Information Technology or a related field is required.
• IAM I/IAT II certification or higher.
• 3–5 years of relevant industry experience.

Responsibilities

• Assist the ISSM; assume ISSM responsibilities in their absence.
• Ensure systems operate, are maintained, and disposed of per security policies and procedures.
• Attend required security training related to duties.
• Ensure users have the requisite clearances and need-to-know before access.
• Conduct periodic reviews to ensure compliance with security requirements.
• Coordinate changes with ISSM and AO/DAO prior to changes.
• Formally notify ISSM/AO/DAO when changes affect authorization.
• Monitor recovery processes to ensure security functions are restored.
• Maintain current security documentation accessible to authorized personnel.
• Conduct audits and Continuous Monitoring; respond to incidents and participate in status meetings.
• Manage hardware and software configuration baselines.
• Identify architecture flaws using STIG/SCAP/Nessus for review.
• Mentor ISSO 1 and support other duties as assigned.

Skills

Auditing techniques

RMF knowledge

IT fundamentals

Network concepts

Education

Bachelor's degree in IT or related field

IAM I/IAT II certification or higher

Tools

PS/BASH

Job description

Draper is looking for an Information System Security Officer 2 (ISSO 2) to support continuous monitoring and authorization efforts for multiple classified systems under the ISSM. You will perform cyber security duties including physical/security training, incident handling, and SSP updates.

Ideal candidates have 3–5 years of relevant experience, a bachelor's in IT, and IAM I/IAT II certification or higher. Requires TS//SCI with Polygraph; base salary range is shown in posting.