Information Systems Security Officer; ISSO) II

Job Summary:

The Information Systems Security Officer II (ISSO II) is responsible for supporting the security and compliance of assigned information systems and networks in accordance with applicable government, customer, and organizational requirements. With at least three years of relevant experience, the ISSO performs recurring security activities with limited supervision, maintains System Security Plans and related authorization documentation, evaluates security controls, conducts vulnerability and continuous monitoring activities, and supports incident response and remediation.

The position works directly with program managers, system administrators, security engineers, and internal and external customers throughout the system life cycle. The ISSO also implements procedures for the protection, handling, and accountability of classified systems, media, and equipment and evaluates system changes for security and documentation impacts.

Requirements:

• Performs information system security activities with limited supervision and applies established requirements and professional judgment to routine and moderately complex assignments.?
• Prepares, maintains, and updates System Security Plans, security control documentation, risk assessments, Plans of Action and Milestones, and other authorization artifacts.?
• Coordinates system authorization and continuous monitoring activities, including evidence collection, control reviews, documentation updates, and status reporting.?
• Conducts vulnerability scans, analyzes results, documents findings, recommends corrective actions, and tracks remediation through validation and closure.?
• Monitors assigned systems for compliance with approved security configurations, access requirements, operating procedures, and authorization conditions.?
• Reviews proposed hardware, software, configuration, account, and network changes; evaluates security impact; and ensures required approvals and documentation are completed.?
• Conducts recurring user account, access authorization, security training, audit log, media, and configuration reviews and documents results.?
• Identifies, documents, reports, and supports the investigation and mitigation of suspected security incidents in accordance with established procedures.?
• Implements and maintains procedures for the protection, control, storage, transfer, and disposition of classified systems, media, and equipment.?
• Advises technical staff and program personnel on established security requirements, identified risks, documentation needs, and corrective actions.?
• Coordinates with internal and external stakeholders to resolve security findings, obtain required evidence, and maintain authorization schedules.?
• Maintains accurate security records and provides clear status reports on risks, findings, remediation activities, and assigned deliverables.?
• Researches applicable cybersecurity requirements and recommends updates to procedures, documentation, or security practices.?
• Escalates significant risks, incidents, unresolved findings, and matters requiring management or senior security review.?
• Knowledge of cybersecurity principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management.?
• Working knowledge of information system security controls, authorization documentation, continuous monitoring, vulnerability management, configuration management, and incident response.?
• Working knowledge of government and cybersecurity and classified information system requirements applicable to the assigned environment.?
• Knowledge of Windows and/or Linux operating systems, networks, user account administration, security configurations, audit logs, and common security technologies.?
• Skill in preparing and maintaining…