Information Systems Security Officer (ISSO)

Position would require the candidate to be a W2 employee of Donatech. US Citizenship Required. Active Secret Clearance Required.

• Prepare systems for inspections, audits, and assessments by ensuring documentation, controls, and processes are compliant and inspection-ready.

• Review and approve data transfers and user access requests within assigned scope, ensuring adherence to security policies, authorization boundaries, and contractual requirements.

• Conduct advanced system auditing and log analysis to identify trends, recurring issues, and potential security risks, and recommend mitigations to the ISSM.

• Develop, validate, and maintain cybersecurity documentation, authorization artifacts, and compliance reports to ensure systems remain audit-ready.

• Manage and track Plans of Action and Milestones (POA&Ms) within ISSO responsibility, ensuring timely remediation of findings from inspections, audits, or continuous monitoring.

• Participate in Change Control Boards (CCBs), reviewing proposed system changes for security impact, authorization implications, and risk considerations.

• Collaborate with cross-functional teams (IT, Facilities, Industrial Security) and enterprise cybersecurity stakeholders to ensure consistent application of ISSO responsibilities across technical and operational environments.

• Monitor system metrics, vulnerability trends, and continuous monitoring data to support risk reporting and operational decision-making.

• Communicate system security posture, inspection readiness, and ISSO-level findings to the ISSM and other senior cybersecurity personnel.

Qualifications You Must Have

• Active DoD Secret Security Clearance required on day one.

• IAM Level I certification compliant with DoD 8570 / DoD 8140

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.

• Experience performing cybersecurity monitoring, detection, auditing, and continuous monitoring activities in an enterprise or DoD environment.

• Working knowledge of cybersecurity principles, including network security, system logging, access management, and incident detection.

• Experience analyzing security alerts, logs, and network traffic to identify anomalous or malicious activity and escalate appropriately.

• Ability to document findings, audit results, and response actions in accordance with established procedures.

• Familiarity with cybersecurity tools such as SIEMs (Splunk preferred), IDS/IPS, endpoint protection, vulnerability scanning, and network monitoring platforms.

• Experience participating in Change Control Boards (CCBs) and reviewing proposed system changes for security impact and risk.

• Ability to collaborate with cross-functional teams to support secure operations and maintain audit-ready systems.

• Familiarity with DoD or other regulated environments, including RMF, JSIG, NIST, NISPOM, and DAAG guidance.

Qualifications We Prefer

• Advanced experience using SIEM platforms such as Splunk for log analysis, alert triage, event correlation, and reporting.

• Working knowledge of enterprise network protocols, architectures, and advanced attack techniques.

• Experience supporting inspection and assessment readiness, including trend analysis of security events and POA&M tracking.

• Exposure to vulnerability management processes and tools, including evaluation of findings and mitigation tracking.

• Ability to analyze system metrics, identify trends, and communicate risk and mitigation strategies to senior analysts or leadership.

• Experience coordinating with IT, Facilities, and Industrial Security teams to ensure consistent application of cybersecurity controls.