Information Systems Security Officer I
Summary
Supports information security, daily security operations, and system authorization (NIST RMF) for the Analytic Mission Integration program, working alongside senior ISSOs. Day to day: maintaining security posture, preparing SSPs/C&A documentation, managing security configurations, and monitoring events in Splunk. On-site in Annapolis Junction, MD; DoD 8570 IAT I+ required.
Specifically, the Analytic Mission Integration (AMI) team is looking for an entry-level ISSO to support information security, security operations, and system authorization activities.
The Work:
- Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies
- Manage daily security operations and maintain the system’s operational security posture
- Assess security risks and solutions, manage security settings for software, hardware, and firmware, and review the security impact of system changes
- Prepare, review, and maintain security documentation, including SSPs, risk assessments, C&A packages, and SRTMs, in accordance with ODNI and DoD policies
- Support system authorization under the NIST Risk Management Framework (RMF)
- Use Splunk to monitor security events, analyze logs, and support incident response
- Provide configuration management for security-relevant software, hardware, and firmware, and maintain records on workstations, servers, routers, firewalls, and network switches
- Administer the information system’s user identification and authentication mechanisms and support the ISSM in maintaining the system’s IA posture
- Five (5) years’ experience as an ISSO on programs and contracts of similar scope, type, and complexity
- Bachelor’s degree in Computer Science or related discipline from an accredited college or university
- Four (4) years of additional ISSO experience may be substituted for a bachelor’s degree
- DoD 8570 compliance with IAT Level I or higher
- Experience in at least one of: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
- Experience preparing security documentation (SSPs, risk assessments, C&A packages, SRTMs)
- Familiarity with the NIST Risk Management Framework (RMF)
- Splunk for security event monitoring, log analysis, and incident response