Information Systems Security Officer - ISSO

$94,800 - $203,100/Yr

Two Six Labs - Laurel, MD

Full-time - Mid Level

Laurel, MD

Professional, Scientific, and Technical Services

About the position

The Information System Security Officer (ISSO) at Two Six Technologies is responsible for ensuring compliance for assigned classified programs within a fast-paced and collaborative environment. This role requires a strong understanding of security protocols, particularly NIST 800, and involves working closely with the Corporate Security team to maintain and achieve compliance across various information systems. The ideal candidate will have a proactive approach to problem-solving and the ability to work independently while also being a team player.

Responsibilities

• Work with the Corporate Security team to ensure all information systems remain or achieve compliance.
• Complete STIG checklists and POA&Ms.
• Work with DCSA using EMASS for drafting and submitting RMF packages.
• Review all data transfers to information systems.
• Perform weekly, bi-weekly, and monthly audits for all assigned accredited systems.
• Conduct Continuous Monitoring activities per customer requirements.
• Serve as an advisor to the ISSM in the RMF process.
• Perform customer annual self-inspections and self-assessments.
• Collaborate with Information System Security Engineers to build a CUI network.

Requirements

• 5+ years of experience working within a classified environment as an ISSO or ISSM.
• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related degree, or additional experience and advanced professional industry certifications.
• Security certifications such as: Security+, GCISP, GSEC, SSCP, CASP+, CISM, CISSP, etc. (Preferred: CASP+, CISM, CISSP).
• Experience working with DCSA and using EMASS for drafting and submitting RMF packages.
• Prior SCI or SAP network experience.
• Ability to work independently to identify, assess & resolve unique security situations with innovative solutions.
• Working knowledge of government regulations such as the DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), NIST SP 800-53, NIST SP 800-171, etc.
• Understanding of CMMC.
• Active Top Secret clearance with SCI eligibility and willingness to obtain poly.

Nice-to-haves

• Experience with Continuous Monitoring activities.
• Familiarity with STIG checklists and POA&Ms.

Benefits

• Medical, dental, and vision insurance.
• Life and disability insurance.
• Retirement benefits.
• Paid leave.
• Tuition assistance.
• Professional development.