Sr. ISSO (FS Poly)

AUGUST SCHELL ENTERPRISES, INC.; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

August Schell Enterprises, Inc. seeks a Senior Information System Security Officer (ISSO) to lead security for a large software program across development, maintenance, and IT operations.

You will implement strategies to mitigate threats, protect data, and assess vulnerabilities while coordinating with security professionals. The role requires Full Scope Poly, DoD 8570 IAT II/IAM II compliance, and a strong track record in creating SSPs, system security plans, and accreditation artifacts for

Qualifications

• At least 10 years as ISSO, independently or on teams.
• At least 5 years using IAVA management tools.
• At least 5 years maintaining SSPs and security documentation.
• Knowledge of security tools, encryption, and protocols.
• Experience evaluating software security to meet requirements.
• Experience coordinating and enforcing security policies on large programs.
• Strong self‑initiative and collaborative mindset.

Responsibilities

• Support enforcing information systems security policies and standards.
• Evaluate security solutions for processing multiple information types.
• Assist with configuration management for security software, hardware, and firmware.
• Analyze threats and implement incident detection and remediation methods.
• Maintain records for workstations, servers, routers, firewalls, and switches.
• Provide support to the ISSM for maintaining IA posture.
• Develop and update Certification & Accreditation documentation.
• Support IAVA management and patch deployment.

Skills

IAVA management

SSP documentation

Security policies

Information assurance

Incident response

Team player

Education

Bachelor's degree

Tools

IAVA tools

Security evaluation tools

Job description

Please NOTE: Full Scope Poly is required for this role.

Senior Information System Security Officer (ISSO)

The selected candidate will act as an ISSO for a large software development program which includes software maintenance and development, IT support (Network/Workstation/Server) systems integration and life cycle support, enterprise application development, network engineering, and information systems security (ISS). The candidate will work with other security professionals in developing and implementing strategies to detect and mitigate threats to information systems, protect critical data sets, and provide assessments of system and network vulnerabilities.

Primary Roles and Responsibilities

• Provide support for implementing and enforcing information systems security policies, standards, and methodologies.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing multiple types of information.
• Assist with the Configuration Management for information system security software, hardware, and firmware.
• Analyze threats and develop and implement best practice methodologies for incident detection, reporting, and vulnerability remediation.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Evaluate security solutions to ensure they meet security requirements for processing information.
• Maintain operational security posture for information systems.
• Provide support to the Information System Security Manager (ISSM)for maintaining the appropriate operational IA posture for a system/program/enclave.
• Develop and maintain documentation for Certification & Accreditation in accordance with specified policies.
• Develop and update system security plans and other IA documentation.
• Provide support for Information Assurance Vulnerability Alerts (IAVAs)management (initiating IAVA responses and system security scans, completing remediation, extending IAVA patches and security updates to designated sites, etc.)
• Provide CM for security-relevant information system software, hardware, and firmware. Develop system security policy and ensure compliance.
• Administer the user identification and authentication mechanisms of the Information System.

Basic Qualifications

• Must have at least 10 years of experience as ISSO working independently, and/or on teams maintaining secure information system operations in isolated, connected and standalone environments.
• Must have at least 5 years of experience using tools to support IAVA management.
• Must have at least 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security related documentation.
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques/tools.
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements.
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program.
• Demonstrated experience performing day-to-day security operations of large, complicated information and information processing systems.
• Must be committed to developing and adhering to best practices.
• Must possess a high level of self‑initiative and must be a solutions‑oriented team player.
• Must have excellent interpersonal skills.

Preferred Qualifications

• Bachelor's degree in a related field and at least 12 years of relevant experience.
• Extensive experience as an Information Systems Security Officer on large software development and integration programs.
• DoD 8570 compliance with IAT Level II or higher.
• DoD 8570 compliance with IAM Level II or higher.

Who we are...

August Schell offers30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complexIT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team,we are family.

The following questions are entirely optional. To comply with government Equal Employment Opportunity and/or Aff…

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A "disabled veteran" is one of the following:
  • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
  • a person who was discharged or released from active duty because of a service-connected disability.
• A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An "active duty wartime or campaign badge veteran" means