Information Systems Security Officer 1

As a Cyber Systems Engineer - ISSO, you will play a key role in securing complex systems, ensuring compliance with federal cybersecurity frameworks, and protecting sensitive information.

Provides support for a program, organization, system, or enclave's information assurance program. Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed. Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware, and firmware. Manages changes to system and assesses the security impact of those changes. Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Supports security authorization activities in compliance with Agency Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process Agency.

Serve as the Information Systems Security Approval Authority for systems under your control.

Provide technical and compliance support for the organization’s Information Assurance (IA) program.

Plan, coordinate, and enforce IT security programs across various systems and projects.

Maintaining the operational security posture for mission-critical information systems.

Developing and enforcing information system security policies, standards, and methodologies.

Supporting day-to-day security operations, including system monitoring and incident response.

Conducting vulnerability and risk assessments to support system certification and accreditation (C&A).

Evaluating security solutions to ensure they meet requirements for handling classified data.

Managing system configuration, changes, and security impact assessments.

Preparing and reviewing key documentation including:

System Security Plans (SSPs)

Risk Assessment Reports

Certification & Accreditation (C&A) packages

System Requirements Traceability Matrices (SRTMs)