Junior ISSO

Requirements

Bruck Edwards, Inc. is a growing, small, government contracting company providing IT services to the federal government. Our culture is founded on providing all employees with a stimulating environment in which they can maximize their potential. We are dedicated to making a positive impact on our customers by providing them with high-end technical solutions, outstanding customer service, and continually improving our process.

We provide our staff with the resources they need to achieve success while giving employees the freedom to develop innovative and creative solutions to meet our customer’s needs.

Bruck Edwards is seeking a Junior ISSO who will play a critical role in supporting the security and compliance of federal IT systems and infrastructure. The Junior ISSO will assist in implementing and maintaining security measures in accordance with the Federal Information Security Management Act (FISMA), NIST standards, and federal IT security policies.

Responsibilities include supporting the security authorization and accreditation (A&A) process, ensuring compliance with federal continuous monitoring requirements, and assisting in annual PKI audits and other compliance processes. Track and resolve security incidents, maintain security documentation, and ensure adherence to applicable Certificate Policies and Practices. Collaborate with the Information Assurance team to provide security training to trusted role personnel, conduct risk assessments, and implement mitigation strategies.

The role requires a proactive approach to identifying and addressing security vulnerabilities, maintaining system security plans (SSPs), and supporting the development of contingency plans, incident response plans, and business impact analyses. Assist in developing and executing security testing, audits, and continuous monitoring processes to ensure the integrity, confidentiality, and availability of federal information systems.

• Familiarity with FISMA, NIST standards, and federal cybersecurity regulations.
• Understanding of Public Key Infrastructure (PKI) technologies and related security practices.
• Ability to identify security vulnerabilities and implement effective mitigation strategies.
• Incident Response:
  Proficiency in tracking, reporting, and resolving security incidents.
• Documentation Management:
  Strong skills in maintaining and updating security documentation, including SSPs, IRPs, and CPs.
• Security Testing and Auditing:
  Experience in conducting security tests, audits, and continuous monitoring processes.
• Technical Proficiency:
  Knowledge of operating systems, networking, and security tools, with relevant certifications (e.g., CISSP, CISM, GIAC).
• Communication
  
  Skills:
  
  Ability to clearly communicate technical concepts, both orally and in writing, to diverse audiences.
• Problem‑Solving:
  Analytical skills to troubleshoot and resolve security issues effectively.
• Collaboration:
  
  Ability to work in a team environment and coordinate with stakeholders and other teams.
• Adaptability:
  Flexibility to respond to evolving security requirements and emerging threats.
• Attention to Detail:
  Precision in identifying and addressing security vulnerabilities and maintaining compliance.

• 6+ years of experience in information assurance or cybersecurity roles, preferably supporting IT projects with similar technologies.
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• An Associate's Degree, plus 4 years of experience, can equate to a bachelor’s degree.

• Preferred
  
  Certifications:
  
  Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Global Information Assurance Certification (GIAC).
• Strong knowledge of federal IT security policies, NIST standards, and PKI-related technologies.
• Excellent communication, problem‑solving, and organizational skills.
• Ability to work collaboratively in a team environment and adapt to evolving security requirements.

Please note this position may require access to sensitive and/or confidential data, it is the responsibility of the employee to acknowledge and adhere to BE’s Ethics and applicable security policies addressing the acceptable use of information system resources.

Bruck Edwards is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.