Information Systems Security Officer (ISSO) I

Description

Job Summary:

The Information Systems Security Officer I (ISSO I) supports the security and compliance of information systems and networks in accordance with applicable government, customer, and organizational requirements. Working under supervision, the ISSO I assists with system authorization activities, maintenance of System Security Plans and related documentation, security control implementation and assessment, vulnerability scanning, continuous monitoring, and incident reporting. The position collaborates with program managers, system administrators, security engineers, and internal and external customers throughout the system life cycle. The ISSO I also supports procedures for the protection, handling, and accountability of classified systems, media, and equipment and helps ensure that system changes are properly documented and reviewed. 

Requirements

Requirements:

• Performs routine information system security tasks under the guidance of senior security personnel and established procedures. 
• Assists with preparing, maintaining, and updating System Security Plans, security control documentation, risk assessments, Plans of Action and Milestones, and other authorization artifacts. 
• Supports system authorization and continuous monitoring activities by gathering evidence, tracking documentation, and coordinating required updates. 
• Conducts or assists with vulnerability scans, reviews results, documents findings, and supports remediation tracking and validation. 
• Monitors assigned systems for compliance with approved security configurations, access requirements, and operating procedures. 
• Assists with reviewing proposed hardware, software, configuration, account, and network changes for security impact and required documentation. 
• Supports user account reviews, access authorization, security training records, audit log reviews, and other recurring security activities. 
• Assists with identifying, documenting, reporting, and mitigating suspected security incidents in accordance with established procedures. 
• Helps implement and maintain procedures for the protection, control, storage, transfer, and disposition of classified media and equipment. 
• Communicates security requirements and findings to technical staff, program personnel, customers, and other stakeholders in a clear and professional manner. 
• Maintains organized and accurate security records and provides status updates on assigned tasks, findings, and corrective actions. 
• Keeps current on applicable cybersecurity requirements, organizational policies, and security tools relevant to assigned systems. 
• Escalates complex, high-risk, or non-routine issues to senior security personnel or management. 
• Knowledge of basic cybersecurity principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management. 
• Working knowledge of information system security controls, authorization documentation, continuous monitoring, vulnerability management, and incident response concepts. 
• Familiarity with government and Department of Defense cybersecurity and classified information system requirements applicable to the assigned environment. 
• Basic knowledge of Windows and/or Linux operating systems, networks, user account administration, security configurations, audit logs, and common security tools. 
• Ability to interpret and follow security policies, technical guidance, standard operating procedures, and customer requirements. 
• Ability to prepare and maintain accurate security documentation, records, spreadsheets, reports, and system artifacts. 
• Ability to identify routine security issues, gather relevant information, apply established procedures, and escalate matters appropriately. 
• Ability to use vulnerability scanning, endpoint security, log review, ticketing, collaboration, and standard office productivity tools. 
• Ability to communicate technical and compliance information clearly in writing and verbally to technical and nontechnical audiences. 
• Ability to manage multiple assignments, meet deadlines, maintain attention to detail, and work effectively with moderate supervision. 
• Ability to protect sensitive and classified information and exercise sound judgment, discretion, and professional integrity. 
• Ability to work collaboratively with cross-functional teams and respond professionally to customer and stakeholder requests. 

Qualifications:

• Minimum of one year of relevant experience in information system security, cybersecurity, information technology, system      administration, network administration, security compliance, or a related field. 
• Bachelor's degree in cybersecurity, information technology, computer science, management information systems, or a related      field; equivalent relevant education, training, certifications, and experience may be considered. 
• Ability to obtain and maintain the security clearance and customer access required for the position. 
• Baseline cybersecurity certification meeting contract or customer requirements is preferred or may be required within a      specified period after hire. 
• Prior exposure to security documentation, vulnerability scanning, system administration, networking, or compliance activities through employment, military service, internships, education, or hands-on training is preferred.