Information Systems Security Officer - ISSO (SME) NEW

$144,300 - $260,850/Yr

Leidos - Reston, VA

Full-time - Mid Level

Reston, VA

Professional, Scientific, and Technical Services

About the position

The Information Systems Security Officer (ISSO) serves as a Subject Matter Expert (SME) responsible for ensuring the security of information systems within an Agile team. This role involves researching, generating, and validating security controls to support the Risk Management Framework (RMF) and ICD 503 Security Accreditation. The ISSO will define and maintain Systems Security Plans (SSP) and coordinate with customer security organizations to achieve Authority to Operate (ATO). The position requires a deep understanding of security vulnerabilities and the implementation of necessary improvements.

Responsibilities

• Serve as the principal advisor to the information system owner and the ISSM on all security matters.
• Identify and define system security requirements.
• Coordinate with ISSEs and Tech Leads to implement technical solutions during development.
• Prepare and maintain information systems Accreditation and Authorization (A&A) packages.
• Propose mitigation strategies for vulnerabilities identified in the system.
• Assist ISSEs and Security Engineers with the implementation of the Continuous Monitoring program.
• Participate in the change management process.

Requirements

• Active TS/SCI with Polygraph clearance.
• Five or more years of information assurance and cyber security engineering experience.
• Experience with the Risk Management Framework (RMF) and ICD 503 Security Accreditation processes.
• Experience coordinating with Information System Security Managers (ISSM) in testing, documenting, and achieving accreditation of systems.
• MS in Computer Science, Engineering, Information Technology, System Administration, Cyber Security, or equivalent experience; BS with additional experience considered.
• Comptia Security + and/or CISSP Certification.

Nice-to-haves

• Experience with security tools such as Nessus Security Center, WebInspect, Appdetective, Xacta.
• Experience with Cloud Computing Technologies/Amazon Web Services (AWS).
• Knowledge of STIG compliance and POA&M and vulnerability management.
• Familiarity with shared IC networks and multiple security enclaves.

Benefits

• Competitive salary range of $144,300.00 - $260,850.00.
• Opportunities for professional development and training.