ISSO I - Cybersecurity & Compliance Specialist

Pyramid Systems, Inc.; Fairfax (VA); On-site; USD 70,000 - 100,000; Full time

Job summary

Pyramid Systems, Inc. is seeking an Information Systems Security Officer I (ISSO I) to support security and compliance of information systems and networks for government and organizational needs.

Under supervision, you will assist with system authorization, continuous monitoring, and documentation, coordinating with program managers and technical staff. The role emphasizes vulnerability management, incident reporting, and maintaining security records.

Qualifications

• Performs routine information system security tasks under the guidance of senior security personnel and established procedures.
• Assists with preparing, maintaining, and updating System Security Plans, security control documentation, risk assessments, Plans of Action and Milestones, and other authorization artifacts.
• Supports system authorization and continuous monitoring activities by gathering evidence, tracking documentation, and coordinating required updates.
• Conducts or assists with vulnerability scans, reviews results, documents findings, and supports remediation tracking and validation.
• Monitors assigned systems for compliance with approved security configurations, access requirements, and operating procedures.
• Assists with reviewing proposed hardware, software, configuration, account, and network changes for security impact and required documentation.
• Supports user account reviews, access authorization, security training records, audit log reviews, and other recurring security activities.
• Assists with identifying, documenting, reporting, and mitigating suspected security incidents in accordance with established procedures.
• Helps implement and maintain procedures for the protection, control, storage, transfer, and disposition of classified media and equipment.
• Communicates security requirements and findings to technical staff, program personnel, customers, and other stakeholders in a clear and professional manner.
• Maintains organized and accurate security records and provides status updates on assigned tasks, findings, and corrective actions.
• Keeps current on applicable cybersecurity requirements, organizational policies, and security tools relevant to assigned systems.
• Escalates complex, high-risk, or non-routine issues to senior security personnel or management.
• Knowledge of basic cybersecurity principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management.
• Working knowledge of information system security controls, authorization documentation, continuous monitoring, vulnerability management, and incident response concepts.
• Familiarity with government and Department of Defense cybersecurity and classified information system requirements applicable to the assigned environment.
• Basic knowledge of Windows and/or Linux operating systems, networks, user account administration, security configurations, audit logs, and common security tools.
• Ability to interpret and follow security policies, technical guidance, standard operating procedures, and customer requirements.
• Ability to prepare and maintain accurate security documentation, records, spreadsheets, reports, and system artifacts.
• Ability to identify routine security issues, gather relevant information, apply established procedures, and escalated matters appropriately.
• Ability to use vulnerability scanning, endpoint security, log review, ticketing, collaboration, and standard office productivity tools.
• Ability to communicate technical and compliance information clearly in writing and verbally to technical and nontechnical audiences.
• Ability to manage multiple assignments, meet deadlines, maintain attention to detail, and work effectively with moderate supervision.
• Ability to protect sensitive and classified information and exercise sound judgment, discretion, and professional integrity.
• Ability to work collaboratively with cross-functional teams and respond professionally to customer and stakeholder requests.

Responsibilities

• Supports the security and compliance of information systems and networks under supervision.
• Assists with system authorization and continuous monitoring by gathering evidence and coordinating updates.
• Conducts vulnerability scans, reviews results, documents findings, and supports remediation tracking.
• Monitors systems for compliance with approved security configurations and access requirements.
• Assists with reviewing changes for security impact and required documentation.
• Supports user account reviews, security training records, and audit log reviews.
• Assists with identifying, documenting, reporting, and mitigating suspected security incidents.
• Helps protect classified media and equipment and ensures proper handling and disposition.
• Communicates security requirements and findings to technical staff and stakeholders.
• Maintains organized security records and provides status updates on tasks and corrective actions.

Skills

Information security basics

Vulnerability management

Incident response

Security documentation

Communication skills

Team collaboration

Education

Bachelor’s degree in cybersecurity or related field

Job description

Pyramid Systems, Inc. is seeking an Information Systems Security Officer I (ISSO I) to support security and compliance of information systems and networks for government and organizational needs.

Under supervision, you will assist with system authorization, continuous monitoring, and documentation, coordinating with program managers and technical staff. The role emphasizes vulnerability management, incident reporting, and maintaining security records.