Information Systems Security Officer

Information Systems Security Officer

About the Role

This role serves as an Information Systems Security Officer (ISSO) supporting the Proliferated Warfighter Space Architecture (PWSA) / SDA Tranche program. The position involves securing mission-critical systems, advanced engineering environments, and technologies that directly support national security.

Key Responsibilities

• Perform day-to-day ISSO responsibilities and provide technical cybersecurity guidance for assigned classified information systems.
• Support and maintain Risk Management Framework (RMF) authorization packages and system Authorities to Operate (ATOs).
• Monitor, analyze, document, and respond to cybersecurity events, vulnerabilities, and security incidents.
• Document compliance activities and develop and manage Plans of Action and Milestones (POA&Ms).
• Ensure classified information systems are operated, maintained, and disposed of in accordance with applicable government regulations, security policies, and approved procedures.
• Support configuration management of security-relevant hardware, software, firmware, operating systems, and system documentation.
• Maintain required information system lifecycle and authorization documentation.
• Evaluate proposed system changes, hardware, software, and emerging technologies for cybersecurity and authorization impacts, providing recommendations.
• Support implementation of new and complex technologies across multiple classification levels while maintaining compliance.
• Conduct cybersecurity education, awareness, and role-based training for system users, administrators, and program personnel.
• Participate in internal and external cybersecurity assessments, audits, inspections, and risk assessments.
• Support investigations involving cybersecurity incidents, policy violations, vulnerabilities, and potential compromises.
• Ensure appropriate protection, mitigation, and corrective actions are implemented for identified vulnerabilities or incidents.
• Implement and enforce applicable cybersecurity policies and procedures.
• Support continuous monitoring activities, vulnerability assessments, security control validation, and remediation efforts.
• Coordinate with government customers and authorization authorities to support system assessments, authorization decisions, and ongoing compliance.

Requirements & Tech Stack

• Active SECRET security clearance required.
• DoD 8570/8140 IAM Level III certification required.
• Hands-on experience with industry-standard Information Assurance and cybersecurity tools for system authorization, including:
• Vulnerability scanning
• Auditing
• Endpoint protection
• Security Information and Event Management (SIEM)
• Authorization package submission tools
• Demonstrated ability to analyze cybersecurity requirements, policies, procedures, vulnerabilities, and compliance discrepancies to determine appropriate risk-based courses of action and corrective measures.
• Experience leading and executing the Risk Management Framework (RMF) process, including coordination with government Authorizing Officials and accreditation authorities.
• Experience conducting risk and vulnerability assessments in accordance with applicable government cybersecurity requirements and frameworks, including DCSA DAAG, JSIG, ICD 503, and NIST RMF requirements.
• Ability to lead, motivate, influence, mentor, and performance-manage personnel.
• Ability to effectively translate cybersecurity objectives, technical risks, and program requirements into broader business outcomes.
• Strong communication and relationship-building skills.
• Ability to balance cybersecurity compliance, mission requirements, and program objectives.

Desired Skills

• Current experience supporting Intelligence Community (IC) customers in classified environments.
• Demonstrated ability to obtain, maintain, and support system Authorities to Operate (ATOs).
• Hands-on experience applying DISA STIG and ICD 503, JSIG, and DCSA DAAG security requirements.
• Experience implementing and securing new and complex technologies across multiple classification levels, including large-scale and enterprise environments.
• Basic understanding of Artificial Intelligence (AI) concepts, technologies, and associated cybersecurity considerations.
• Basic Linux cybersecurity skills, including familiarity with command-line operations, file permissions, account management, security configurations, vulnerability scanning, and system hardening concepts.