Junior Information Systems Security Officer (ISSO)

INFORMATION SYSTEMS SOLUTIONS, INC; Suitland (MD); On-site; USD 65,000 - 80,000; Full time

Benefits offered by this job

401(k) matching

Family medical deductibles coverage

Spot bonuses

Educational assistance

Job summary

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence, ensuring DoD cybersecurity compliance and RMF implementation. You will maintain A&A documentation and participate in continuous monitoring to keep systems authorized.

This position is 100% onsite and requires TS/SCI clearance eligibility, with collaboration across system admins, engineers, and stakeholders to resolve issues and document security posture.

Qualifications

• 1–2 years of cybersecurity experience
• Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
• Knowledge of Department of the Navy (DON) cybersecurity policies and directives
• Experience with automated cybersecurity assessment tools including ACAS, CIS Benchmarks, SCAP, Retina
• Experience supporting cybersecurity documentation including A&A and RMF artifacts
• Basic knowledge of cloud service models (SaaS, PaaS, IaaS)
• Basic knowledge of cloud deployment models (public, private, hybrid, community) and architectures
• Ability to develop security control assessment procedures using GRC tools like eMASS and Xacta

Responsibilities

• Support RMF lifecycle activities by maintaining A&A documentation, implementing security controls, and assisting with system authorization using eMASS and Xacta
• Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation
• Ensure compliance with NAVINTEL ICD 503 and DON cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments
• Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation

Skills

RMF processes

A&A artifacts

ACAS

SCAP

CIS Benchmarks

Retina

NAVINTEL ICD 503

DON policies

eMASS/Xacta

Cloud basics

Cloud models

GRC tools

Cybersecurity basics

Tools

eMASS

Xacta

Job description

Description

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team.

This position is 100% onsite.

Specific duties include, but are not limited to the following:

• Support RMF lifecycle activities by maintaining Authorization & Accreditation (A&A) documentation, implementing security controls, and assisting with system authorization efforts using eMASS and Xacta.
• Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation and validating compliance with DON cybersecurity requirements.
• Ensure compliance with NAVINTEL ICD 503 and Department of the Navy cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments.
• Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation.

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements

Clearance Level

TS/SCI clearance

Certifications (IAT Level II)

One of the following:

• CCNA-Security
• GICSP
• GSEC
• Security+ CE
• SSCP

Required Skills:

• 1–2 years of experience in cybersecurity or a related field
• Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
• Knowledge of Department of the Navy (DON) cybersecurity policies and directives
• Experience with automated cybersecurity assessment tools, including:
  • Assured Compliance Assessment Solution (ACAS)
  • Center for Internet Security (CIS) Benchmarks
  • Security Content Automation Protocol (SCAP)
  • Retina
• Experience supporting cybersecurity documentation, including Authorization & Accreditation (A&A) and RMF artifacts
• Basic knowledge of cloud service models (Software as a Service, Platform as a Service, Infrastructure as a Service)
• Basic knowledge of cloud deployment models (public, private, hybrid, and community) and associated architectures
• Ability to develop security control assessment procedures and test statements using Governance, Risk, and Compliance (GRC) tools such as eMASS and Xacta

Professional Qualities:

• Effective written and verbal communication skills
• Strong organizational skills and attention to detail
• Ability to work effectively in a team environment
• Ability to adapt to changing requirements and operational priorities
• Ability to follow established procedures and directions
• Adherence to the established chain of command when addressing issues or inquiries
• Demonstrated desire to learn, grow, and develop professionally within the cybersecurity field