Junior Information Systems Security Officer (ISSO)

Information Systems Solutions, Inc.; Suitland (MD); On-site; USD 60,000 - 90,000; Full time

Job summary

Information Systems Solutions (ISS) seeks a Junior ISSO to support the Office of Naval Intelligence. You will assist in ensuring security and compliance of information systems per DoD and federal cybersecurity requirements, focusing on RMF implementation, A&A documentation, and continuous monitoring to maintain authorization status.

A path to deepen DoD cybersecurity experience awaits as part of an experienced security team.

Qualifications

• 1-2 years of experience in cybersecurity or a related field.
• Knowledge of NAVINTEL ICD 503 RMF implementation policies and directives.
• Knowledge of Department of the Navy cybersecurity policies and directives.
• Experience with automated cybersecurity assessment tools: ACAS, CIS Benchmarks, SCAP, Retina.
• Experience documenting A&A and RMF artifacts.

Responsibilities

• Support RMF lifecycle activities by maintaining A&A documentation and implementing security controls.
• Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks.
• Track findings through remediation and validate DON cybersecurity requirements.
• Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues and prepare security reports.

Skills

RMF familiarity

NAVINTEL ICD 503

DON policies

ACAS knowledge

CIS Benchmarks

SCAP knowledge

Retina familiarity

A&A documentation

GRC tools (eMass Xacta)

Cloud basics

Tools

eMASS

Xacta

Job description

Description

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team.

Description

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team.

This position is 100% onsite.

Specific duties include, but are not limited to the following:

• Support RMF lifecycle activities by maintaining Authorization & Accreditation (A&A) documentation, implementing security controls, and assisting with system authorization efforts using eMASS and Xacta.
• Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation and validating compliance with DON cybersecurity requirements.
• Ensure compliance with NAVINTEL ICD 503 and Department of the Navy cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments.
• Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation.

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements

Clearance Level

TS/SCI clearance

Certifications (IAT Level II)

One Of The Following

• CCNA-Security
• GICSP
• GSEC
• Security+ CE
• SSCP

Required Skills

• 1-2 years of experience in cybersecurity or a related field
• Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
• Knowledge of Department of the Navy (DON) cybersecurity policies and directives
• Experience with automated cybersecurity assessment tools, including:
• Assured Compliance Assessment Solution (ACAS)
• Center for Internet Security (CIS) Benchmarks
• Security Content Automation Protocol (SCAP)
• Retina
• Experience supporting cybersecurity documentation, including Authorization and Accreditation (A&A) and RMF artifacts
• Basic knowledge of cloud service models (Software as a Service, Platform as a Service, Infrastructure as a Service)
• Basic knowledge of cloud deployment models (public, private, hybrid, and community) and associated architectures
• Ability to develop security control assessment procedures and test statements using Governance, Risk, and Compliance (GRC) tools such as eMASS and Xacta

Professional Qualities

• Effective written and verbal communication skills
• Strong organizational skills and attention to detail
• Ability to work effectively in a team environment
• Ability to adapt to changing requirements and operational priorities
• Ability to follow established procedures and directions
• Adherence to the established chain of command when addressing issues or inquiries
• Demonstrated desire to learn, grow, and develop professionally within the cybersecurity field