Information System Security Officer (ISSO)

The selected candidate will act as an ISSO for a large software development program, supporting software maintenance and development, IT support, systems integration, and information systems security. They will work with other security professionals to develop and implement strategies to detect and mitigate threats to information systems, protect critical data sets, and provide assessments of system and network vulnerabilities.

What You Will Do

The ISSO will provide support for implementing and enforcing information systems security policies, standards, and methodologies, assist in the evaluation of security solutions, and maintain records on workstations, servers, and network devices. They will also develop and maintain documentation for Certification & Accreditation, develop system security plans, and provide support for Information Assurance Vulnerability Alerts (IAVAs) management.

Why It Might Be a Fit

The ideal candidate will have at least 10 years of experience as ISSO, demonstrated knowledge of security tools, and experience with security evaluations and policy implementation. They must also possess a high level of self-initiative, be a solutions-oriented team player, and have excellent interpersonal skills.

Requirements

• At least 10 years of experience as ISSO
• 5 years of experience using tools to support IAVA management
• 5 years of experience using tools to support the preparation, maintenance, and management of SSPs and other security related documentation
• Demonstrated knowledge of and experience with several of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques/tools
• In-depth experience completing security evaluations of software systems or architectures to ensure they meet security requirements
• In-depth experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
• Demonstrated experience performing day-to-day security operations of large, complicated information and information processing systems
• TS/SCI Full Scope Polygraph through MD Customer (last poly within the past 6 years, no CCAs)
• DoD 8570 compliance with IAT Level II or higher
• DoD 8570 compliance with IAM Level II or higher