Business Title Information Systems Security Officer; ISSO

Responsibilities

People Tec is seeking an Information Systems Security Officer (ISSO) for an opportunty to support our Colorado Springs, CO and Los Angeles, CA locations.

The Information Systems Security Officer (ISSO) is a mid-level cybersecurity professional responsible for the day-to-day implementation, monitoring, and documentation of cybersecurity requirements for United States Space Force information systems. Working under the direction of the Information Systems Security Manager (ISSM), the ISSO helps maintain the security posture and authorization status of assigned systems by supporting Risk Management Framework (RMF), continuous monitoring, vulnerability management, security configuration, and cybersecurity compliance activities.

The successful candidate will work closely with system administrators, network engineers, ISSEs, system owners, and other technical personnel to ensure required security controls are implemented, documented, and maintained. The ISSO will monitor system security status, maintain RMF documentation and supporting evidence, track vulnerabilities and Plans of Action and Milestones (POA&Ms), support security assessments, and identify changes that may affect system security or authorization.

This position requires a hands-on cybersecurity professional who can apply DoD cybersecurity requirements within operational information-system environments while working collaboratively with technical teams to resolve findings and maintain mission capability.

Duties:

• Perform day-to-day cybersecurity and information assurance activities for assigned DoD information systems.
• Support implementation, documentation, and continuous monitoring of applicable RMF security controls.
• Maintain RMF authorization documentation and supporting cybersecurity artifacts.
• Update system security information, control implementation statements, evidence, and related documentation within eMASS or other approved systems.
• Assist with development and maintenance of System Security Plans, security procedures, risk assessments, control traceability documentation, and other authorization artifacts.
• Monitor assigned systems for cybersecurity compliance and changes affecting system security posture.
• Review vulnerability scans, security configuration assessments, and other cybersecurity findings.
• Work with system administrators and engineers to remediate vulnerabilities, configuration deficiencies, and security-control findings.
• Develop, update, and track POA&Ms and coordinate corrective actions through closure.
• Support implementation and validation of DISA STIGs and other applicable security configuration requirements.
• Review system changes, software installations, hardware modifications, and configuration changes for potential cybersecurity impacts.
• Maintain cybersecurity records, system inventories, authorization evidence, and other required security documentation.
• Support security-control assessments, authorization activities, continuous-monitoring reviews, inspections, and audits.
• Monitor system logs, security alerts, and other available security information and coordinate potential cybersecurity concerns with appropriate technical and security personnel.
• Support cybersecurity incident identification, documentation, reporting, and response activities.
• Verify that system users and privileged users comply with applicable cybersecurity requirements and access procedures.
• Coordinate with system administrators, network engineers, ISSEs, and other technical personnel to resolve cybersecurity issues.
• Identify cybersecurity risks or compliance concerns and elevate significant issues to the ISSM.
• Support development and maintenance of local cybersecurity procedures and operating instructions.
• Participate in cybersecurity…