Senior ISSO (TS/SCI) - Equity, 401k & Learning

True Anomaly, Inc.; Denver (CO); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Employer-Sponsored Healthcare

Generous Time Off

Equity

401k and Roth 401k

Learning & Development Opportunities

Job summary

True Anomaly, Inc. seeks an Information Systems Security Officer (ISSO) to oversee the security posture of all classified information systems and develop RMF documentation for system authorization.

This onsite role in Centennial, CO reports to the Director of Government Security. Responsibilities include building RMF packages, implementing policies per ICD-503 and NIST 800-53, coordinating with system admins and network engineers, and ensuring timely patching and secure configurations.

Qualifications

• 6+ years of relevant work experience.
• U.S. Citizen.
• Current active DoD TS/SCI clearance.

Responsibilities

• Conduct security reviews of proposed changes or additions to the information system and advise the ISSM on security relevance.
• Ensure all personnel receive the necessary technical and security training to perform their duties effectively.
• Assist with information system security management and day-to-day security operations.
• Perform vulnerability/risk assessment analysis to support continuous monitoring and the certification and accreditation process.
• Serve as a member of the Change Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented.

Skills

RMF expertise

NIST 800-53

Policy development

Vulnerability assessment

Security reviews

Communication

Tools

STIGs

RMF artifacts (SSP, POAM, SCTM)

System topology diagrams

Job description

True Anomaly, Inc. seeks an Information Systems Security Officer (ISSO) to oversee the security posture of all classified information systems and develop RMF documentation for system authorization.

This onsite role in Centennial, CO reports to the Director of Government Security. Responsibilities include building RMF packages, implementing policies per ICD-503 and NIST 800-53, coordinating with system admins and network engineers, and ensuring timely patching and secure configurations.