ISSO II: Information Security & RMF Specialist

Draper Labs; Cambridge (MA); On-site; USD 82,000 - 220,000; Full time

Job summary

Draper in Cambridge, MA seeks an Information System Security Officer 2 (ISSO) to support continuous monitoring of classified systems under the ISSM. You will perform technical and non-technical cyber security tasks, update SSPs, manage changes, and assess security impacts.

The role emphasizes monitoring, documentation, training, and coordination with security teams to uphold authorization standards. A TS//SCI with poly is required or pursued, with opportunity for professional growth.

Qualifications

• Requires a bachelor’s degree in Information Technology or a related field.
• Equivalent industry experience may be substituted.
• Possesses an IAM I/IAT II Certification, or greater.

Responsibilities

• Assist the ISSM in meeting duties and responsibilities.
• Ensure systems are operated, maintained, and disposed of per security policies and procedures.
• Attend required technical and security training relative to assigned duties.
• Ensure all users have the requisite security clearances and responsibilities before granting access.
• Conduct periodic reviews of information systems to ensure compliance with the security package.
• Coordinate changes to hardware, software, or firmware with the ISSM and AO/DAO prior to change.
• Notify the ISSM and AO/DAO when changes affect system authorization.
• Monitor recovery processes to ensure security features are restored.
• Ensure security documentation is current and accessible to authorized individuals.
• Conduct Audits and Continuous Monitoring (ConMon) activities and incident response.
• Manage configuration baselines of hardware and software.
• Identify architecture flaws using STIG/SCAP/Nessus for ISSM review.
• Mentor ISSO 1.
• Performs other duties as assigned.

Skills

Auditing techniques

RMF

Vulnerability Management

SCAP

STIG

Education

Bachelor's degree in Information Technology or related field

IAM I/IAT II Certification or greater

Tools

PS/BASH scripting

Job description

Draper in Cambridge, MA seeks an Information System Security Officer 2 (ISSO) to support continuous monitoring of classified systems under the ISSM. You will perform technical and non-technical cyber security tasks, update SSPs, manage changes, and assess security impacts.

The role emphasizes monitoring, documentation, training, and coordination with security teams to uphold authorization standards. A TS//SCI with poly is required or pursued, with opportunity for professional growth.