Information Systems Security Officer; ISSO), Network Security, TS​/SCI

All hired employees are expected to have experience with Microsoft Copilot and/or an approved equivalent AI solution.

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI cleared Information System Security Officer (ISSO), Network Security to support enterprise network systems in a secure DoD environment. The Network ISSO will support cybersecurity compliance, Risk Management Framework (RMF), vulnerability management, DISA STIG validation, continuous monitoring, and authorization sustainment for Cisco based network infrastructure.

The Network ISSO will work closely with network engineers, cybersecurity staff, ISSMs, ISSEs, system owners, and mission partners to ensure network systems remain secure, compliant, documented, and operationally effective. This role is suited for a technical ISSO with experience in RMF, ACAS, eMASS, POA&Ms, firewall rule reviews, ports and protocols, vulnerability remediation, and secure network operations.

This position is onsite in Charlottesville, VA.

• Support cybersecurity compliance, risk management, and continuous monitoring for enterprise network systems.
• Review and validate security configurations for Cisco routers, switches, firewalls, and related network infrastructure.
• Support DISA STIG validation, SCAP benchmarks, security baselines, and device hardening requirements.
• Conduct, review, and validate vulnerability scans using ACAS, Tenable Nessus, STIG Viewer, and other approved DoD tools.
• Analyze vulnerability findings, identify false positives, document risk, and coordinate remediation with network engineering teams.
• Develop and maintain RMF documentation including SSPs, POA&Ms, Continuous Monitoring artifacts, hardware and software inventories, network diagrams, and control implementation details.
• Support ATO package development, renewal, extension, audit readiness, and authorization sustainment activities.
• Review firewall rules, access control lists, ports, protocols, services, VPN connections, network flows, and boundary protection controls.
• Support change control reviews by assessing network changes for cybersecurity, RMF, documentation, and compliance impacts.
• Monitor compliance through eMASS, ACAS, STIG Viewer, vulnerability management tools, and other approved DoD systems.
• Support incident response activities by reviewing network related alerts, logs, firewall events, syslog data, authentication events, and corrective actions.
• Prepare security status updates, vulnerability summaries, POA&M updates, compliance reports, and risk briefings for stakeholders and leadership.

• BS degree in Engineering, Computer Science, or related field
  • Experience may be substituted for degree.
• TS/SCI Clearance
• DoD 8140 (8570) IAT Level II Certification
• CCNA certification

• Minimum 4 years of experience supporting cybersecurity, information assurance, network security, RMF, vulnerability management, or secure infrastructure operations.
• Experience supporting cybersecurity activities within the DoD, Intelligence Community, or other secure enterprise environment.
• Demonstrated understanding of DoD cybersecurity policy, RMF lifecycle, continuous monitoring, and authorization sustainment.
• Experience developing or maintaining SSPs, POA&Ms, Continuous Monitoring documentation, control implementation details, and authorization artifacts.
• Familiarity with eMASS for control tracking, package updates, risk documentation, and authorization maintenance.
• Hands on experience with ACAS, Tenable Nessus, STIG Viewer, SCAP, or vulnerability management processes.
• Experience reviewing, validating, or remediating vulnerability findings for network devices or supporting infrastructure.
• Experience applying or validating DISA STIGs, secure configuration baselines, and hardening guidance.
• Working knowledge of Cisco routers, switches, firewalls, Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms.
• Working knowledge of routing, switching, VLANs, ACLs, firewall policies, ports, protocols, VPNs, IPsec, NAT, DNS, DHCP, subnetting, logging, and boundary protection.
• A…