Information System Security Officer (ISSO)

Overview

Intelligent Waves is seeking a Information System Security Officer (ISSO) to support Special Access Programs (SAPs) within Department of Defense (DoD) environments. The ISSO will maintain the operational security posture of assigned information systems while working closely with the ISSM, ISSE, and ISO. Responsibilities include day-to-day system security operations, authorization documentation, configuration management, security impact assessments, incident handling, and security awareness while supporting Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments.

Location: This position may be based at Eielson AFB, Alaska, Hill AFB, Utah, or Eglin AFB, Florida. One position will be filled. Candidates are evaluated on qualifications rather than site preference, and the position will be established at the location of the selected candidate. The selected candidate will be assigned to a single site and must be located to perform daily onsite work. This is not a rotational or multi-site resident position. Travel: Up to 50% – travel is may be required based on mission requirements, including contingency and surge operations. All authorized travel will be reimbursed in accordance with GSA Per Diem rates and the Department of War Joint Travel Regulations (JTR). Clearance Requirement: TS/SCI

Intelligent Waves delivers mission-focused multi-domain operational expertise and innovation to the Government through high-impact technology solutions in cybersecurity, data science, enterprise network & systems engineering, software development, and cognitive human performance.

ANYTIME. ANYWHERE. ANY DOMAIN.

Since 2006, we have proudly served federal agencies including the Department of Defense. Our ability to operate globally in a wide range of environments, coupled with our deep understanding of customer needs and requirements, enables us to provide cost-effective solutions that support some of the nation's most complex and mission-critical objectives.

Adherence to all customer site protocols is mandatory for employees.

Responsibilities

• Assist the ISSM in executing information system security duties and responsibilities.
• Prepare, review, and update system authorization packages.
• Maintain security control documentation and continuous monitoring artifacts in accordance with applicable Risk Management Framework (RMF) and JSIG requirements.
• Track and manage Plans of Action and Milestones (POA&M) through closure.
• Conduct continuous monitoring activities for authorization boundaries under assigned purview.
• Perform security impact assessments and coordinate any changes or modifications to hardware, software, or firmware with the ISSM and AO/DAO prior to implementation.
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Support STIG compliance, vulnerability scanning, and remediation coordination with system owners and administrators.
• Notify the ISSM when changes occur that may affect the authorization determination of assigned information systems.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Ensure audit records are collected, reviewed, and documented, including any anomalies.
• Monitor system recovery processes to verify that security features and procedures are properly restored and functioning correctly.
• Ensure all information system security documentation is current and accessible to properly authorized individuals.
• Execute the cybersecurity portion of the self-inspection, including security coordination and review of all system assessment plans.
• Identify cybersecurity vulnerabilities and assist with the implementation of countermeasures.
• Support incident handling, containment, and reporting in coordination with the ISSM.
• Prepare reports on the status of security safeguards applied to information systems.
• Perform ISSO duties in support of in-house and external customers.
• Assist Department of Defense, national agency, and contractor organizations with the development of assessment and authorization (A&A) efforts.
• Attend required technical and security training relative to assigned duties, including operating system, networking, and security management topics.

Qualifications

• Bachelor's degree, or four years of additional relevant experience in lieu of a degree.
• Five or more years of ISSO or equivalent information assurance experience.
• Working knowledge of the Risk Management Framework and the system authorization process.
• Demonstrated experience developing and maintaining authorization documentation.
• Ability to communicate security requirements clearly to both technical and non-technical stakeholders.

Certifications

• Must meet position and certification requirements outlined in DoD 8140 for Information Assurance Technician Level II or Information Assurance Manager II within six months of the date of hire.