Junior Information Systems Security Officer (ISSO) with Security Clearance

Information Systems Solutions, Inc.; Suitland (MD); Sur place; USD 85 000 - 95 000; Plein temps

Avantages offerts par ce poste

401(k) match

Medical coverage

Spot bonuses

Educational assistance

Résumé du poste

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. This role focuses on implementing RMF, maintaining security documentation, and supporting continuous monitoring to keep systems authorized.

The position is 100% onsite in Suitland, MD. Responsibilities include maintaining A&A docs with eMASS and Xacta, conducting vulnerability assessments with ACAS/SCAP/Retina, and ensuring NAVINTEL ICD 503 and DON

Qualifications

• Requires TS/SCI clearance with one of the following: CCNA-Security, GICSP, GSEC, Security+ CE, SSCP.
• 1–2 years of experience in cybersecurity or a related field.
• Experience with RMF, A&A artifacts, and security control assessments.
• Familiarity with DoD cybersecurity policies and RMF implementation.

Responsabilités

• Maintain RMF lifecycle artifacts and A&A documentation (A&A) using eMASS and Xacta.
• Perform vulnerability assessments and continuous monitoring with ACAS, SCAP, CIS Benchmarks, and Retina.
• Ensure compliance with NAVINTEL ICD 503 and DON cybersecurity policies, documenting risks.
• Collaborate with sysadmins and engineers to resolve cybersecurity issues and prepare security reports.
• Develop security control assessment procedures and test statements using GRC tools.

Connaissances

Communication skills

Organizational skills

Teamwork

Adaptability

Following procedures

Chain of command

Desire to learn

Cloud basics

Outils

ACAS

CIS Benchmarks

SCAP

Retina

eMASS

Xacta

Description du poste

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team. This position is 100% onsite.

Specific duties include, but are not limited to the following:

• Support RMF lifecycle activities by maintaining Authorization & Accreditation (A&A) documentation, implementing security controls, and assisting with system authorization efforts using eMASS and Xacta.
• Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation and validating compliance with DON cybersecurity requirements.
• Ensure compliance with NAVINTEL ICD 503 and Department of the Navy cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments.
• Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation.
• Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
• Knowledge of Department of the Navy (DON) cybersecurity policies and directives
• Experience with automated cybersecurity assessment tools, including: * Assured Compliance Assessment Solution (ACAS) * Center for Internet Security (CIS) Benchmarks * Security Content Automation Protocol (SCAP) * Retina * Experience supporting cybersecurity documentation, including Authorization and Accreditation (A&A) and RMF artifacts
• Basic knowledge of cloud service models (Software as a Service, Platform as a Service, Infrastructure as a Service)
• Basic knowledge of cloud deployment models (public, private, hybrid, and community) and associated architectures
• Ability to develop security control assessment procedures and test statements using Governance, Risk, and Compliance (GRC) tools such as eMASS and Xacta

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements Clearance Level TS/SCI clearance Certifications (IAT Level II) One of the following: CCNA-Security GICSP GSEC Security+ CE SSCP Required Skills: * 1–2 years of experience in cybersecurity or a related field

Professional Qualities:

• Effective written and verbal communication skills
• Strong organizational skills and attention to detail
• Ability to work effectively in a team environment
• Ability to adapt to changing requirements and operational priorities
• Ability to follow established procedures and directions
• Adherence to the established chain of command when addressing issues or inquiries
• Demonstrated desire to learn, grow, and develop professionally within the cybersecurity field Salary Description 85,000-95,000