Information System Security Officer

Job# 3035444 Location

Washington, DC (On-site)

We are seeking an Information System Security Officer to join a team supporting a federal agency. The role involves ensuring the security and compliance of information systems, working with system owners and cybersecurity professionals to implement and maintain security controls. This position plays a direct part in safeguarding mission-critical systems and data. The work schedule is generally Monday through Friday during standard business hours, with the potential for 24/7 support during disaster operations.

• Support customer systems throughout the Risk Management Framework (RMF) lifecycle.
• Develop and maintain documentation to support Certification & Accreditation (C&A) as required by FISMA.
• Manage the end-to-end Authority to Operate (ATO) package process.
• Ensure proper access controls are implemented for system access and physical access to data processing facilities.
• Provide information security expertise to system development teams throughout the System Engineering Lifecycle (SELC) process.
• Maintain and track Plan of Action & Milestones (POA&M) reports for vulnerabilities.
• Investigate security incidents to determine the extent of compromise to information and automated systems.
• Configure and validate secure systems and test security products to detect weaknesses.
• Support security documentation and architecture reviews.
• Brief leadership and support client-facing deliverables.

Clearance: Ability to obtain/maintain DOD Top Secret/SCI Clearance & DHS EOD Clearance.

Education & Experience:

• Bachelor's degree and 7 years of applicable experience, or 13 years of applicable experience in lieu of a degree.
• A minimum of 3 years of experience working with FISMA.
• Experience as an ISSO or ISSO Manager supporting federal systems.

Technical Skills &

Certifications:

• Demonstrated expertise in SELC, Information Security processes, audits, tools, FISMA, NIST, and DHS 4300A.
• Must hold at least one of the following IAT Level III qualifications:
  Certified Information System Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP+), or other applicable IAT or IAM cybersecurity professional certifications.
• Experience with Xacta IA Manager and/or CSAM.

• Certified Authorization Professional (CAP).
• Previous experience with federal civilian or defense agencies.

The anticipated salary range for this position is $ to $ annually. A comprehensive benefits package is available to eligible employees.

The employer is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin or protected veteran status and will not be discriminated against on the basis of disability.