Information Systems Security Officer; ISSO - Senior

Modern Technology Solutions Inc. is seeking a highly experienced Information Systems Security Officer (ISSO) to lead cybersecurity efforts for an AFLCMC program office. This role focuses on ensuring compliance with laws, regulations, and security requirements while implementing strategic and technical cybersecurity solutions.

• Security Policy Implementation:
  Develop, implement, and enforce security policies, standards, and procedures to ensure the protection of information systems.
• Configuration Management:
  Ensure that all information systems are configured securely according to organizational policies and best practices.
• System Patching:
  Perform system patching in response to IAVAs and other security findings and requirements.
• Risk Management:
  
  Conduct risk assessments to identify and mitigate potential security threats. Assess the impact of changes in the IT environment and update the risk management framework accordingly.
• Security Compliance:
  Ensure that information systems comply with relevant government and industry standards, such as NIST, FISMA, and DoD regulations. Prepare and maintain documentation to demonstrate compliance.
• Continuous Monitoring:
  Implement continuous monitoring processes to detect and respond to security vulnerabilities and threats. Utilize tools like SIEM to monitor system activities.
• Security Audits:
  Conduct regular security audits and assessments to evaluate the effectiveness of security measures and identify areas for improvement.
• Collaboration:
  
  Work closely with other IT and security professionals to ensure a coordinated approach to cybersecurity. Liaise with external stakeholders, such as auditors and regulatory bodies, as needed.
• Documentation:
  Maintain comprehensive documentation of security policies, procedures, and measures taken to secure information systems. Prepare reports for management on security status and incidents.
• Security Enhancements:
  Recommend and implement security enhancements to improve the overall security posture of the organization. Stay updated with the latest security trends and technologies.
• Team Leadership:
  Oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job.

• Must be a U.S. Citizen.
• Active Top‑Secret Security Clearance with ability to obtain SCI.

• Certifications required: COMPTIA Security+ / CISSP.
• Desired AWS certification (e.g., AWS Solutions Architect Associate or Professional).

• A Master of Arts/Master of Science/Master of Engineering (MA/MS/ME) degree.
• Years of experience may be considered in lieu of a master’s degree.

• At least three (3) years’ experience in a Special Access Program (SAP) and/or Sensitive Compartmented Information (SCI) environment within the last five (5) years.
• Minimum of 10 years of relevant work experience.
• Minimum of 2‑5 years of experience in ISSO roles.
• Proficiency in using security tools and technologies such as firewalls, intrusion detection/prevention systems, SIEM, and endpoint protection.
• Knowledge of network security, application security, and endpoint security principles.
• Understanding of operating systems (Windows, Linux, etc.) and their security configurations.
• Familiarity with cloud security best practices.
• Familiarity with RMF process.
• Experience with Splunk or other similar applications.
• Experience with security compliance and regulatory requirements.
• Strong analytical and problem‑solving abilities.
• Capability to analyze complex security issues and develop practical solutions.
• Excellent written and verbal communication skills.
• Ability to effectively communicate technical information to non‑technical stakeholders.
• Experience working in a DoD program or product acquisition office or environment.

• Proficiency with Windows, Linux, and/or VMware administration.
• Knowledge of network security principles and tools.
• Experience with DISA STIG implementation, RMF compliance processes, and vulnerability assessment tools (Nessus, Splunk, HBSS).

• In‑depth experience supporting government environments, especially within the…