Information Systems Security Officer II
Posted Updated
Summary
Reflexive Concepts is hiring an Information Systems Security Officer (Level 2) in Annapolis Junction, MD to maintain the operational security posture of mission HPC systems across the full RMF lifecycle — security documentation, controls, continuous monitoring, and ATO. Requires 10 years of ISSO experience, DoD 8570 IAM I cert, and active TS/SCI with full-scope polygraph.
Reflexive Concepts is seeking a skilled Information Systems Security Officer (Level 2) to join our growing team!
You will maintain the operational security posture of mission HPC systems, driving the full RMF lifecycle — from security documentation and controls to continuous monitoring and Authority to Operate.
Qualifications:
You will maintain the operational security posture of mission HPC systems, driving the full RMF lifecycle — from security documentation and controls to continuous monitoring and Authority to Operate.
Qualifications:
- Ten (10) years of ISSO experience on programs of similar scope, including at least two of: current security tools, hardware/software security implementation, communication protocols, and encryption techniques/tools
- Bachelor's Degree or higher in Computer Science or a related field
- An additional four (4) years of ISSO experience may be substituted for the degree, for a total of Fourteen (14) years
- RMF process and RMF tools: LATTEART, XACTA, BISCOTTI, WATCHCAT, STE
- Compliance and configuration scanning tools; NIST SP 800-53r3 and/or r5 and NIST SP 800-37
- Full RMF process knowledge: Authority to Operate, security controls, and continuous monitoring
- Security documentation: SSP, POA&M, SPFs for exceptions, BIA, CMP, AAR, CP, SAR, RAR
- DoD 8570 IAM Level I (or higher) certification (with verification code)
- Active TS/SCI clearance with full-scope polygraph (most recent poly within 7 years)
- Collaboration with system administrators and system owners; privileged user oversight
- Configuration management for security-relevant software, hardware, and firmware
- Assessing the security impact of system changes