ISSO, Junior

UICGS / Bowhead Family of Companies; Ashburn (VA); On-site; USD 65,000 - 90,000; Full time

Job summary

Bowhead Family of Companies seeks a Junior Information Systems Security Officer (ISSO) to join a dynamic, mission‑driven team providing TIMS support to CBP PSPD. The position is primarily onsite in Ashburn, VA, with telework at the Government's discretion and core hours 8:00–16:00, Monday to Friday.

The successful candidate will help maintain the security posture of mission‑critical CBP applications by monitoring, reviewing scans, and updating CSAM artifacts, coordinating with development teams

Qualifications

• Bachelor's degree in an IT-related field.
• 2–4 years of experience supporting IT security, cybersecurity tracking, or compliance monitoring.
• Knowledge of federal security frameworks (FISMA, NIST 800-53, DISA STIGs).
• Experience tracking technical tasks using Jira or Agile ticketing.
• Familiarity with vulnerability scanning tools.

Responsibilities

• Support the maintenance of the security posture for PSPD applications.
• Review vulnerability scan reports, analyze findings, and open Jira tickets for remediation.
• Assist in developing, tracking, and updating POA&Ms in CSAM until closed.
• Evaluate Security Test Report findings and help mitigate ISVM alerts.
• Respond to PSPD inquiries within tight SLAs.
• Maintain PSPD Security Branch sites (SharePoint, Confluence, Jira).
• Support tracking and status review of ~190 ISAs.
• Follow Agile processes for security work; adapt to new tools.

Skills

Information Security

Cybersecurity Tracking

Agile / Jira

Vulnerability Scanning

Communication Skills

Education

Bachelor's degree in IT-related field

Tools

Jira

CSAM

Splunk

Nessus

Anchore

WebInspect

DBProtect

Qualys

Job description

Bowhead seeks a Junior Information Systems Security Officer (ISSO) who will be a part of a dynamic, energetic, and mission-oriented team providing Technical Integration Management Support (TIMS) to the U.S. Customs and Border Protection (CBP) Passenger Systems Program Directorate (PSPD). This position will support the primary ISSOs to maintain and protect the security posture of mission-critical CBP applications. This position operates during core business hours of 8:00 AM - 4:00 PM, Monday through Friday, primarily onsite in Ashburn, VA (with telework available at the discretion of the Government).

To be successful, this position must actively mitigate security risks to the enterprise by assisting with continuous monitoring and compliance tracking. This work includes evaluating test findings, updating security artifacts in government tools (CSAM), and tracking vulnerabilities to closure. Coordination with the various application teams is key to success for this work area.

The successful candidate must hold a current and favorably adjudicated CBP suitability background investigation.

Interact with development teams, system owners, and ISSOs. Consequently, this role requires excellent customer service, organizational skills, verbal and written communication skills, and the ability to provide the following services:

• Support the maintenance of the security posture for PSPD applications.
• Review vulnerability scan reports, analyze findings, and open Jira tickets to assign tasks to the application development teams for remediation.
• Assist in developing, tracking, and updating Plans of Action and Milestones (POA&Ms) in the DHS Cyber Security Assessment and Management (CSAM) tool until closed.
• Evaluate Security Test Report findings associated with PSPD systems and assist in developing mitigating actions for Information Security Vulnerability Management (ISVM) alerts.
• Respond to email inquiries from PSPD application teams requesting guidance on security topics within strict Service Level Agreements (e.g., within 3 business days).
• Assist in the development of IT security waivers and exception requests for outstanding security POA&Ms requiring additional resources.
• Maintain the PSPD Security Branch’s sites (SharePoint, Confluence, and Jira), ensuring security-related system information, FISMA IDs, ATO dates, and Quick Links are accurate and up-to-date.
• Support the tracking and status review of approximately 190 Interconnection Security Agreements (ISAs).
• Follow the Agile process for all security-related work, including Sprint Planning, Sprint Reviews, retrospectives, and daily Agile meetings.
• Readily adapt to emerging security tools and processes used by CBP (e.g., Splunk, Nessus, Anchore, WebInspect, DBProtect, Qualys).
• Other duties as assigned
• Bachelor's degree in an IT-related field
• At least 2-4 years of experience supporting IT system security, cybersecurity tracking, or compliance monitoring.
• Knowledge of federal security frameworks, including FISMA, NIST 800-53 security controls, and DISA STIGs.
• Experience tracking technical tasks using Agile/ticketing platforms like Jira.
• Familiarity with vulnerability scanning tools and interpreting scan reports.
• Outstanding communications skills---both written and oral.
• Ability to work in a collaborative, schedule-driven environment and manage multiple tracking tasks simultaneously.
• Experience with US Government systems, particularly navigating CSAM or DHS/CBP security policies is preferred.
• Security certifications such as CompTIA Security+ CE, CAP, or equivalent is preferred.

SECURITY CLEARANCE REQUIREMENTS

Candidates must hold a current and favorably adjudicated CBP suitability background investigation.

Physical Demands

• Must be able to lift up to 25 pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically