Position Title: Information Systems Security Officer (ISSO) Experience Level: Mid-Level (3-5 years) Department: Security Reports To: Senior FSO/ISSM Location: Huntsville Job Type: Full-Time
Job Summary
We are seeking a highly motivated and detail-oriented Information Systems Security Officer (ISSO) with 3 to 5 years of experience to join our security team. In this role, you will be responsible for ensuring the operational security posture of our information systems. You will play a critical role in maintaining compliance with industry standards, conducting risk assessments, managing vulnerabilities, and supporting incident response efforts.
Key Responsibilities
- Security Compliance & Governance: Maintain and enforce information security policies, standards, and procedures. Ensure all assigned systems comply with relevant regulatory and organizational requirements.
- Risk & Vulnerability Management: Coordinate and conduct regular vulnerability scans, analyze results, and collaborate with system administrators to ensure timely patching and remediation.
- System Security Plans (SSP): Hands-on experience updating control implementation statements, tracking POA&Ms (Plans of Action and Milestones), and maintaining security documentation within eMass.
- Access Control & Monitoring: Monitor user access controls, perform periodic access reviews, and audit system logs to detect unauthorized activities or policy violations.
- Incident Response Support: Assist the Incident Response team during security incidents, helping to contain, investigate, and document breaches or anomalies.
Required Qualifications
- Clearance: Must have an active Secret US Government Clearance. Please note US Citizenship is required to maintain a Secret Clearance.
- Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (equivalent work experience will be considered).
- Experience: 3 to 5 years of direct experience in an information security role (e.g., ISSO, Security Analyst, or Security Administrator).
Technical Knowledge:
- Solid understanding of network security principles, firewalls, intrusion detection/prevention systems (IDS/IPS), and Identity and Access Management (IAM).
- Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and SIEM platforms (e.g., Splunk, Sentinel).
- Practical knowledge of at least one major security framework, such as NIST SP 800-37/53, ISO/IEC 27001, CIS Controls, or SOC 2.
Certifications: Active security certification is highly preferred (e.g., CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), or Certified Information Systems Security