This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
Information Systems Security Officer (ISSO)
Pennsylvania State University - State College, PA
posted 3 months ago
About the position
The Information Systems Security Officer (ISSO) at Penn State University is a critical role within the Cyber and Information Security team at the Applied Research Laboratory (ARL). This position is responsible for ensuring the security and compliance of both unclassified and classified networks, contributing to high-impact projects that support the Navy, Department of Defense, and Intel Community. The ISSO will engage in proactive security measures, risk assessments, and the development of security documentation, making it an excellent opportunity for individuals passionate about cybersecurity in a collaborative environment.
Responsibilities
- Support the development, validation, and submission of security documentation, including information system security plans and certification packages.
- Assist in conducting and coordinating risk assessments of information systems across various environments.
- Conduct assessments and reviews of systems and networks to identify deviations from acceptable configurations and policies.
- Aid in the development of training materials related to security compliance and audit requirements for ARL employees.
- Perform technical tasks such as vulnerability scanning, security log review, network analysis, and incident response.
Requirements
- Associate's degree or higher in a related field or equivalent combination of education and experience.
- Exposure to Assessment and Authorization processes and Risk Management Framework (RMF).
- Familiarity with NIST 800-53, NISPOM, NIST 800-171, and Department of Defense Directives.
- Operational knowledge of security/event log auditing.
- Ability to obtain and maintain information security certifications such as Security+ or CISSP.
Nice-to-haves
- Current eligibility for access to classified information at the Secret level or higher.
- Policy and procedure development experience.
- Vulnerability scanning and mitigation experience using tools like Nessus or ACAS.
- Experience with Windows or UNIX/Linux operating system administration.
- Knowledge of TCP/IP network analysis and tools like tcpdump or Wireshark.
Benefits
- Hybrid work location (on-site/work from home)
- Opportunities for professional development
- Support for obtaining security certifications
- Diversity, equity, and inclusion initiatives
