Information Systems Security Officer; ISSO
Listed on 2026-10-08
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Network Security, Security Management & Operations
Position Title:
Information Systems Security Officer (ISSO) Experience Level: Mid-Level (3–5 years) Department:
Security
Reports To:
Senior FSO/ISSM
Location:
Huntsville Job Type: Full-Time
Job Summary
We are seeking a highly motivated and detail-oriented Information Systems Security Officer (ISSO) with 3 to 5 years of experience to join our security team. In this role, you will be responsible for ensuring the operational security posture of our information systems. You will play a critical role in maintaining compliance with industry standards, conducting risk assessments, managing vulnerabilities, and supporting incident response efforts.
Key Responsibilities
Security Compliance & Governance:
Maintain and enforce information security policies, standards, and procedures. Ensure all assigned systems comply with relevant regulatory and organizational requirements.
Risk & Vulnerability Management:
Coordinate and conduct regular vulnerability scans, analyze results, and collaborate with system administrators to ensure timely patching and remediation.
System Security Plans (SSP):
Hands-on experience updating control implementation statements, tracking POA&Ms (Plans of Action and Milestones), and maintaining security documentation within eMass.
Access Control & Monitoring:
Monitor user access controls, perform periodic access reviews, and audit system logs to detect unauthorized activities or policy violations.
Incident Response Support:
Assist the Incident Response team during security incidents, helping to contain, investigate, and document breaches or anomalies.
Required Qualifications
Clearance:
Must have an active Secret US Government Clearance. Please note US Citizenship is required to maintain a Secret Clearance.
Education:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (equivalent work experience will be considered).
Experience:
3 to 5 years of direct experience in an information security role (e.g., ISSO, Security Analyst, or Security Administrator).
Technical Knowledge:
Solid understanding of network security principles, firewalls, intrusion detection/prevention systems (IDS/IPS), and Identity and Access Management (IAM).
Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and SIEM platforms (e.g., Splunk, Sentinel).
Practical knowledge of at least one major security framework, such as NIST SP 800-37/53, ISO/IEC 27001, CIS Controls, or SOC 2.
Certifications:
Active security certification is highly preferred (e.g., CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), or Certified Information Systems Security
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).