Junior Information System Security Officer

Jimmy Jazz; Washington (District of Columbia); On-site; USD 80,000 - 110,000; Full time

Job summary

Tharros seeks a Junior Information System Security Officer (ISSO) to support the security posture across a portfolio of classified and unclassified systems in a Government SCIF in Washington, DC. You will maintain authorization artifacts, review logs, and track POA&Ms under ICD 503 and DHS 4300C.

The role requires a BS degree (or 4+ years IT/cybersecurity), 1 year RMF/security compliance experience, and active TS/SCI clearance. On-site in DC with strong documentation skills.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' IT/cybersecurity experience.
• Minimum 1 year of ISSO, RMF, or security compliance support experience.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS polygraph.
• Knowledge of RMF, NIST SP 800-37 and 800-53.
• Knowledge of hybrid classified/unclassified, on-premise and cloud environments.
• Familiarity with DevSecOps and agile methodologies.
• Experience securing Linux and Windows operating systems.
• POA&M tracking and audit log review experience.
• Ability to maintain accurate documentation across multiple systems.
• Proficiency in Microsoft Office,Teams or similar tools.
• Certifications such as CompTIA Security+ or CySA+ are desirable.
• Experience with RSA Archer, eMASS, or similar GRC tools.
• Exposure to Cross Domain Solutions.

Responsibilities

• Maintain security artifacts (SSP, POA&Ms, risk exceptions, contingency plans) in the GRC tool.
• Track POA&Ms on 30/60/90/120/180-day review intervals and provide reports.
• Perform weekly audit log reviews and respond to alerts.
• Ensure periodic vulnerability scans are conducted and reviewed.
• Submit IATT requests and notify ISSM, SCA, AO of changes to authorization.
• Support contingency plan tests and quarterly CPEM reporting.
• As SCIF ISCR, maintain hardware inventory and report SCI security incidents.

Skills

RMF knowledge

NIST SP 800-37

NIST SP 800-53

DevSecOps

Agile methodologies

Linux/Windows security

POA&M tracking

Audit log review

Documentation

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

RSA Archer

eMASS

GRC tool

Job description

• Location 1790 Ash Street Southeast,Washington, DC, 20032,United States
• Employee Type Regular Full-Time
• Required Degree 4 Year Degree

Contact information

• Name Talent Acquistion
• Email [e-mail]

Description

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Junior Information System Security Officer (ISSO).

In this role you will support the security posture of assigned systems within a portfolio of more than 130 classified and unclassified systems, in accordance with ICD 503 and DHS 4300C. Working with senior ISSOs, you will maintain authorization artifacts, track POA&Ms, review audit logs, and serve as a SCIF Information Security Compliance Representative (ISCR). This position is on-site in a Government SCIF in Washington, DC.

• Maintain security artifacts (SSP, POA&Ms, risk exceptions, contingency plans, privileged user guides, PTAs) in the GRC tool.
• Track POA&Ms on 30/60/90/120/180-day review intervals and provide weekly or bi-weekly activity reports.
• Perform audit log reviews at least weekly and respond to NOSC alerts.
• Ensure periodic vulnerability scans are performed and review scan results.
• Submit IATT requests and notify the ISSM, SCA, and AO of changes affecting authorization.
• Support annual contingency plan tests and quarterly CPEM reporting.
• As SCIF ISCR, maintain hardware inventory, process entry/exit paperwork, submit monthly checklists, and report SCI security incidents.

Requirements

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' experience in IT or cybersecurity.
• Minimum of 1 year of experience in ISSO, RMF, or security compliance support.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of the Risk Management Framework (RMF), NIST SP 800-37, and NIST SP 800-53.
• Knowledge of hybrid classified/unclassified, on-premise and cloud environments.
• Knowledge of DevSecOps and agile methodologies.
• Skill in securing Linux and Windows operating systems.
• Skill in POA&M tracking and audit log review.
• Ability to maintain accurate documentation across multiple systems.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CompTIA Security+ or CySA+ certification.
• Experience with RSA Archer, eMASS, or a similar GRC tool.
• Exposure to Cross Domain Solutions.

.

Summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.