Information Systems Security Officer III
Posted
Summary
On-site Information Systems Security Officer (ISSO) III in Beavercreek, OH, protecting government customer information systems across the lifecycle: leading RMF/A&A authorization packages, continuous monitoring, and vulnerability remediation. Requires an active TS/SCI clearance and centers on NIST 800-53, eMASS/Xacta, ACAS/Nessus, and DISA STIGs.
Parallax Advanced Research is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.
|
Position Title
|
Information Systems Security Officer III
|
Reports to
|
Director, Information Technology System
|
|
Effective Date
|
11-1-26
|
FLSA Status
|
Exempt
|
|
Employment Status
|
Full-Time
|
Work Location
|
On-Site
|
|
Location
|
Parallax HQ: 4035 Colonel Glenn Hwy, Beavercreek, OH 45431
|
Position Summary
The Parallax Advanced Research mission is to deliver innovative research and provide technology, human, and business solutions through The Science of Intelligent Teaming™ for government, industry, and academic clients.
The Information Systems Security Officer (ISSO) III protects customer information systems and maintains their security posture across the full system lifecycle. This role turns security requirements into practical action, maintains authorization documentation, and helps technical teams identify, prioritize, and resolve cybersecurity risks. The ISSO III works closely with Information System Security Managers (ISSMs), system owners, administrators, engineers, assessors, and cybersecurity service providers, and explains security risks and remediation priorities clearly to technical teams and program leadership. This is an individual contributor position with no supervisory responsibilities.
Essential Duties and Responsibilities
The essential functions include, but are not limited to the following:
Risk Management Framework & Authorization
- Lead assigned Risk Management Framework (RMF) and Assessment and Authorization (A&A) activities, including preparing and maintaining authorization packages and supporting evidence.
- Develop and maintain System Security Plans, security control implementation statements, Plans of Action and Milestones (POA&Ms), diagrams, inventories, and supporting security procedures.
- Maintain accurate system boundaries, asset records, interconnection documentation, and shared or inherited control descriptions.
- Prepare risk recommendations, exception requests, and security status reports for the ISSM, system owner, and designated approval authorities.
Continuous Monitoring & Vulnerability Management
- Perform continuous monitoring, validate security control evidence, support assessments and inspections, and track authorization conditions and recurring deliverables.
- Analyze vulnerability scans and configuration assessments, including ACAS/Nessus, SCAP, and DISA STIG results, and work with technical owners to prioritize remediation and verify closure evidence.
- Review security logs, access controls, and configuration findings to identify risks and suspicious activity.
Configuration & Change Management
- Review proposed system, software, network, and cloud changes, document security impacts, and coordinate required reviews before implementation.
- Coordinate with engineering and operations teams to build security requirements into development, deployment, and sustainment activities.
Incident Response
- Report suspected incidents through approved channels and coordinate with the incident response team or Cybersecurity Service Provider (CSSP).
- Support incident documentation, evidence preservation, and corrective actions, and validate that required security controls and monitoring are restored after recovery.
Training, Compliance & Continuous Improvement
- Support security awareness and role-based training.
- Share knowledge with less experienced staff and improve the quality and consistency of security documentation.
- Follow all requirements for handling classified information and systems.
- Other duties as assigned.
Minimum Qualifications (Knowledge, Skills, and Abilities)
- US Citizenship.
- Active TS/SCI clearance and the ability to maintain it.
- Five or more years of relevant cybersecurity or information assurance experience, including hands-on ISSO, ISSE, or comparable RMF and authorization responsibilities.
- DoD 8140 workforce qualification for the assigned DCWF work role and proficiency level (for example, Security+ CE or higher), as required by the supported contract.
- Demonstrated experience developing and maintaining authorization packages, supporting assessments, and managing POA&Ms through remediation and closure.
- Working knowledge of NIST SP 800-37, NIST SP 800-53, and applicable customer cybersecurity requirements.
- Experience with eMASS, Xacta, or a comparable governance, risk, and compliance platform.
- Ability to interpret vulnerability findings, security configurations, technical diagrams, and security control evidence in Windows, Linux, network, or cloud environments.
- Strong technical writing, analytical, organizational, and communication skills, with the ability to manage competing priorities across multiple teams.
- Ability to travel up to 15 percent.
Preferred Qualifications (Knowledge, Skills, and Abilities)
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent experience where permitted by the customer contract.
- Advanced credentials such as CGRC, CISSP, CISM, or CCSP.
- Experience supporting classified, SCI, or SAP environments, including JSIG, ICD 503, or the DCSA Assessment and Authorization Process Manual (DAAPM).
- Experience supporting federal or defense systems, complex authorization boundaries, or multiple concurrent authorization packages.
- Experience with AWS GovCloud, Azure Government, cloud control inheritance, FedRAMP, or DevSecOps environments.
- Experience automating evidence collection, compliance reporting, or recurring security tasks.
Physical Demands and Work Environment
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodation may be provided to enable individuals with disabilities to perform the functions. On-site work, including secure areas where personal electronic devices are not permitted, with conditional telework for unclassified work. Travel up to 15 percent.