ISSO

Role:

Information Systems Security Officer (ISSO)

Location:

Fairfax, VA

Minimum Clearance:

Active TS//SCI with CI Poly

Summary:

Client is seeking a highly motivated ISSO to support the Fairfax facility. The role will assist the ISSM/ISSO to ensure compliance with IC and DoD security guidelines/directives and provide special project support to the Security Team.

Job Description / Responsibilities:

• Perform assessments of systems/networks to identify deviations from acceptable configurations, policies, or standards via compliance audits and vulnerability assessments.

• Develop and maintain documentation in support of RMF processes, operating procedures, and policies.

• Create and manage POAMs in response to reported security vulnerabilities.

• Perform Information Assurance (IA) activities within cleared environments to meet client timelines.

• Conduct Continuous Monitoring (ConMon) per NIST SP 800-137, including auditing for anomalous/malicious activity.

• Establish strict program control processes to mitigate risks and support system certification and accreditation.

• Provide process, analysis, coordination, test, documentation, and inspection support for emerging technologies.

• Perform periodic audit reviews, track corrective actions, and manage closure of issues.

• Manage media handling, labeling, scanning, and cross-domain data transfers (manual and automated).

Basic Qualifications:

• TS/SCI clearance with CI Poly.

• DoD 8570 IAM Level I certification.

• Experience with:

  • Security tools, hardware/software security implementation.

  • Communication protocols.

  • Encryption techniques/tools.

Required Skills & Experience:

• Knowledge of ICD 503, NIST SP 800-37, CNSS publications, and other RMF processes.

• Experience with scan tools and systems: STIG, SCAP, EVSS, Security Center, Nessus, NMAP.

• Strong analytical/problem-solving skills to address evolving client situations.

• Ability to incorporate new knowledge seamlessly in client interactions.

• Experience working with development teams to integrate security practices from requirements phase onward.

• Relevant security certifications (Security+, CISSP, etc.) or ability to obtain within 6 months of hire.

Desired Skills & Experience:

• Nessus scanning, STIG/SCAP compliance.

• Splunk (including Security Essentials).

• eMASS and ServiceNow.

• Linux/Unix operating systems.

• Conducting ISAP inspections.

• Experience configuring/securing Windows systems.

• IC customer's ServiceNow and DoD eMASS.

• AWS or other cloud technologies.

• Strong writing skills (executive and technical audiences).

Education & Experience:

• Bachelor's Degree in Computer Science, Information Technology, or related field (or equivalent experience).