Information System Security Officer

Leidos Dynetics, reporting through our Digital sector, is seeking a talented Information System Security Officer (ISSO), to join a diverse team, to create unique solutions for complex problems. With offices across the United States engaging in the defense, space, cyber and commercial fields, Dynetics provides responsive, cost-effective engineering, scientific and IT solutions. This position will report to our Huntsville, AL location.

In this role, you will support the cybersecurity compliance and operational security of DoW classified information systems operating within a DCSA approved environment. Working under the direction of the Information System Security Manager (ISSM), you will assist in maintaining Authorization to Operate (ATO) compliance, supporting Risk Management Framework (RMF) activities, preparing for DCSA security reviews, and partnering with Information Technology teams to maintain secure and compliant classified information systems.

Location:

All work will be performed on-site at our Huntsville, AL office with up to 20% local telework. Clearance:
You must currently hold an active DoD Secret clearance to be considered for this role. You must also be eligible to obtain Top Secret clearance post hire.

• Perform routine cybersecurity compliance assessments and security audits of classified information systems to verify compliance with NIST RMF, DCSA DAAG, NISPOM, organizational security policies and report identified deficiencies, risks, and noncompliance to the ISSM and appropriate stakeholders.
• Support the Risk Management Framework (RMF) lifecycle, including development, review, and maintenance of authorization artifacts and the system Body of Evidence (BoE).
• Evaluate implementation and effectiveness of security controls and maintain supporting evidence required for continuous monitoring, assessments, and authorization activities.
• Perform technical security assessments, including Security Technical Implementation Guide (STIG), Security Content Automation Protocol (SCAP), vulnerability scanning, and configuration reviews.
• Analyze security findings and vulnerabilities, coordinate remediation activities with system administrators and engineering teams, and validate corrective actions.
• Review Configuration Management (CM) requests within delegated authority for hardware, software, system configuration, and security-relevant changes.
• Ensure changes are appropriately documented, assessed for security impact, and processed through the Configuration Control Board (CCB).
• Provide cybersecurity guidance to system administrators, engineers, program personnel, and system owners regarding secure configurations, system changes, and implementation of security requirements.
• Conduct periodic technical and administrative assessments to validate continued compliance with approved security plans, procedures, and authorization requirements.
• Support security incident response activities, including investigation, documentation, evidence preservation, containment, corrective actions, and reporting.
• Support sanitization, declassification, transfer, and release of information system hardware and media in accordance with applicable security requirements and Authorizing Official (AO) guidance.
• Develop, review, and maintain cybersecurity documentation, procedures, system security plans, assessment artifacts, and other technical documentation.
• Evaluate and support implementation of new cybersecurity processes, technologies, and tools to improve system security, compliance, and operational effectiveness.
• Provide cybersecurity education and guidance to system users, administrators, and program personnel as required.
• Support DCSA assessments, security reviews, inspections, and other internal…