Information System Security Officer – ISSO

Responsibilities

• Collaborate daily with the ISSM to provide expert cybersecurity guidance and recommendations.
• Support the development, implementation, and maintenance of security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA, JSIG).
• Oversee the security posture of DoD information systems, ensuring they meet cybersecurity requirements for confidentiality, integrity, and availability.
• Perform risk assessments, vulnerability assessments, and security audits to identify system vulnerabilities and provide remediation strategies.
• Manage and conduct continuous monitoring of security controls, ensuring the protection of classified and unclassified data.
• Coordinate with cross‑functional teams (engineering, IT, operations) to implement and enforce security protocols and best practices.
• Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and continually maintained in compliance with all applicable requirements.
• Act as the primary point of contact for security‑related issues, assisting in incident response and reporting to senior management and government customers.
• Provide security training and awareness programs for personnel involved in the operation of DoD systems.
• Maintain and track security documentation, including system security plans (SSPs), risk assessments, and Plan of Actions & Milestones (POA&Ms).
• Stay current with emerging cybersecurity threats, vulnerabilities, and trends to ensure the program adapts to evolving security challenges.

• US Citizen with at least an active Top Secret security clearance with the ability to obtain a SCI prior to your start date.
• Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503/705, JSIG, DAAPM).
• Must have a DoD 8140 Intermediate certification (e.g., Cloud+, Security+, etc.).
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross‑functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Interest in continuous learning and professional development in cybersecurity.