Junior Information System Security Officer; ISSO - Audit-Focused

Description

The Junior Information Systems Security Officer (ISSO) will provide critical cybersecurity auditing support to the OASIS team in PMA‑205 by reviewing system audit records, identifying and documenting security concerns, and reporting findings to the Information System Security Manager (ISSM) or cybersecurity lead.

• Assisting with reviewing information system audit logs in accordance with established daily, weekly, and monthly schedules.
• Monitoring security logs for unauthorized access attempts, unusual account activity, privilege changes, policy violations, and other suspicious events.
• Documenting audit reviews using approved checklists, tracking systems, and reporting templates.
• Identifying and report audit discrepancies, anomalies, and potential security concerns to the ISSM or senior cybersecurity personnel.
• Escalating suspicious or significant events in accordance with established incident reporting procedures.
• Assisting with tracking audit findings and maintaining supporting documentation through resolution.
• Supporting periodic reviews of user accounts, privileged accounts, and access permissions.
• Verifying that user access aligns with approved roles and authorization records.
• Assisting with reviewing records related to account creation, modification, disabling, and removal.
• Aiding in maintaining audit records to demonstrate compliance with organizational security requirements.
• Supporting internal and external assessments by collecting and organizing requested audit evidence.
• Assisting with preparing recurring audit reports, metrics, and compliance documentation.
• Following established procedures for handling classified, controlled, or sensitive information.
• Safeguarding audit information from unauthorized access, alteration, or disclosure.
• Learning and applying applicable cybersecurity policies, procedures, and regulatory requirements.
• Performing other audit and compliance-related duties as assigned within the scope of the position.
• This position may require up to 5% annual travel.

The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field highly desired. In lieu of degree, 5 years’ experience as an IT technician on DoD classified networks is acceptable.
• This position will require DoD 8570 IAM I level compliance. Qualified candidates will have at least one of the following certifications: (
  Security + CE
  /CAP/CND/Cloud+/GSLC, or HCISPP).
• Minimum 3 years of ISSO or cybersecurity experience, with a strong desire to increase experience that is focused on system/network security auditing.
• Experience with Solar Winds Security Event Manager (SEM), ARM, and related monitoring/auditing tools is preferred.
• Hands‑on experience with ACAS, DISA STIGs, SCAP Compliance Checker, and DoD information security standards.
• Familiarity with NIAP/Common Criteria, DoD APL, and DoD/IC cybersecurity directives.

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self‑directed work style with the ability to operate independently.
• Analytical thinker with proven problem‑solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast‑paced environment.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

• The…