Senior ISSO

Agile Defense, LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Agile Defense, LLC in Washington, DC seeks a Senior ISSO to safeguard government information systems. The role focuses on designing, implementing, and managing security controls to ensure confidentiality, integrity, and availability in compliance with NIST, FISMA, FedRAMP, and agency policies.

The Senior ISSO collaborates with IT teams, security analysts, and management to develop robust security architectures, perform risk assessments, and lead incident response activities in high-pressure

Qualifications

• US Citizenship with Public Trust eligibility.
• Bachelor's degree in Computer Science or Information Technology plus 10 years related experience.
• Certifications such as CISSP, CISM, CISA, CompTIA Security+, or GIAC.
• Proven experience in information security engineering, preferably in a Federal Government Agency or regulated environment.
• Strong understanding of cybersecurity frameworks, standards, and regulations (NIST, FISMA, etc.).
• Knowledge of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, encryption, and authentication protocols.

Responsibilities

• Provide support for the development of policies, standards, instructions, procedures, strategies, and communications relative to the customer's mission.
• Security Infrastructure Design and Implementation: Design and deploy comprehensive security measures to protect information systems, networks, and applications.
• Assessment Support: Conduct regular assessments and audits to identify potential vulnerabilities and security gaps in systems and applications.
• Incident Response and Reporting: Participate in incident response activities to effectively handle and mitigate security incidents and breaches.
• Continuous Monitoring: Utilize security tools and technologies to monitor network traffic, detect anomalies, and investigate potential security incidents to ensure continuous secure operations.
• Plan of Action and Milestones (POA&M) Management: Create, manage, and report on POA&M for customer information systems.

Skills

US Citizenship

Public Trust eligibility

Strong communication

Cross-functional collaboration

Analytical thinking

High-pressure decision making

Education

Bachelor's degree in Computer Science or Information Technology

10 years related experience

Tools

CISSP

CISM

CISA

CompTIA Security+

GIAC

Job description

Senior ISSO

Location: Onsite, Washington, DC

Clearance: Top Secret

The Senior ISSO plays a critical role in ensuring the confidentiality, integrity, and availability of sensitive information and systems within government agencies. This position involves designing, implementing, and managing robust security solutions to safeguard digital assets and mitigate cyber threats. The ISSO collaborates closely with various teams, including IT professionals, security analysts, and management, to uphold the highest standards of cybersecurity in alignment with government regulations and industry best practices.

Essential Functions

• Provide support for the development of policies, standards, instructions, procedures, strategies, and communications relative to the customer's mission.
  • Provide services in accordance with NIST 800-37, NIST 800-53, FISMA of 2014, and organization-level policies, directives, and guidelines.
• Security Infrastructure Design and Implementation:
  • Design and deploy comprehensive security measures to protect information systems, networks, and applications.
  • Develop and implement security architectures, policies, standards, and procedures that align with federal regulations and guidelines.
• Assessment Support:
  • Conduct regular assessments and audits to identify potential vulnerabilities and security gaps in systems and applications.
  • Ensure compliance with federal regulations, standards, and guidelines, such as NIST, FISMA, and FedRAMP.
  • Collaborate with relevant teams to prioritize and address identified vulnerabilities in a timely manner.
• Incident Response and Reporting:
  • Participate in incident response activities to effectively handle and mitigate security incidents and breaches.
  • Contribute to the development and testing of incident response plans and playbooks.
• Continuous Monitoring:
  • Utilize security tools and technologies to monitor network traffic, detect anomalies, and investigate potential security incidents to ensure continuous secure operations.
  • Analyze security logs, reports, and data to identify patterns and trends indicative of unauthorized activities.
  • Support internal and external audits related to information security and assist in remediation efforts.
• Plan of Action and Milestones (POA&M) Management:
  • Create, manage, and report on POA&M for customer information systems.

Qualifications

• US Citizen with Public Trust.
• Bachelor's degree in Computer Science, Information Technology, or a related field plus 10 years related experience.
• Relevant industry certifications such as CISSP, CISM, CISA, CompTIA Security+, or GIAC certifications.
• Proven experience in information security engineering, preferably in a Federal Government Agency or regulated environment.
• Strong understanding of cybersecurity frameworks, standards, and regulations (NIST, FISMA, etc.).
• Knowledge of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, encryption, and authentication protocols.
• Excellent problem-solving skills and the ability to think critically in high-pressure situations.
• Strong interpersonal skills and the ability to work effectively in cross-functional teams.
• Exceptional communication skills, both written and verbal.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities