Senior Information Systems Security Officer (With TS/SCI and active full scope polygraph)

J&T; Annapolis (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

J&T is seeking a Senior Information Systems Security Officer to lead the security posture of our information systems. The role emphasizes enforcing policies, evaluating security solutions, and overseeing certification and accreditation activities.

You will manage IAVA processes, maintain SSPs and IA documentation, and support ISSM in maintaining an appropriate operational IA posture across systems and enclaves.

Qualifications

• Senior ISSO with extensive policy and compliance experience.
• Proven ability to manage IAVA processes and security documentation.
• Clearance requirements include TS/SCI with polygraph.

Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in evaluating security solutions to meet processing security requirements.
• Assist with Configuration Management for information system security software, hardware, and firmware.
• Analyze threats and develop incident detection, reporting, and vulnerability remediation methods.
• Maintain records on workstations, servers, routers, firewalls, and network devices including upgrades.
• Maintain operational security posture for information systems.
• Support ISSM in maintaining operational IA posture for systems/enclaves.
• Develop and maintain Certification & Accreditation documentation and system security plans.
• Provide support for IAVA management (responses, scans, remediation, patches).
• Develop security policy and ensure compliance; administer user identification/authentication mechanisms.

Skills

Senior ISSO

TS/SCI clearance

IAVA management

SSP documentation

Policy enforcement

Threat analysis

Team collaboration

Interpersonal skills

Self-initiative

Security operations

Education

Bachelor's degree

Job description

Primary Roles and Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing multiple types of information.
• Assist with the Configuration Management for information system security software, hardware, and firmware.
• Analyze threats and develop and implement best practice methodologies for incident detection, reporting, and vulnerability remediation.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Evaluate security solutions to ensure they meet security requirements for processing information.
• Maintain operational security posture for information systems.
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system/program/enclave.
• Develop and maintain documentation for Certification & Accreditation in accordance with specified policies.
• Develop and update system security plans and other IA documentation.
• Provide support for Information Assurance Vulnerability Alerts (IAVAs) management (initiating IAVA responses and system security scans, completing remediation, extending IAVA patches and security updates to designated sites, etc.).
• Provide CM for security-relevant information system software, hardware, and firmware.
• Develop system security policy and ensure compliance.
• Administer the user identification and authentication mechanisms of the Information System.

Required Skills

• Currently serving as a Senior Information Systems Security Officer (ISSO)
• Recently functioning in a Senior ISSO capacity with ownership of system security posture and compliance activities
• Must have at least 10 years of experience as an ISSO working independently, and/or on teams maintaining secure information system operations in isolated, connected, and standalone environments.
• Must have at least 5 years of experience using tools to support IAVA management.
• Must have at least 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security-related documentation.
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; and encryption techniques/tools.
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements.
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
• Demonstrated experience performing day-to-day security operations of large, complicated information and information processing systems.
• Must be committed to developing and adhering to best practices.
• Must possess a high level of self-initiative and must be a solutions-oriented team player.
• Must have excellent interpersonal skills.
• Active TS/SCI security clearance with a current polygraph is required

Desired Skills

• Bachelor's degree in a related field and at least 12 years of relevant experience.
• Extensive experience as an Information Systems Security Officer on large software development and integration programs.
• IAT Level II or higher preferred.
• IAM Level II or higher preferred.