Information Systems Security Officer - RMF/Vulnerability (ISSO 2)

Summary

The Information Systems Security Officer (Level 2) plays a key role in strengthening enterprise security posture through continuous monitoring, risk assessment, and RMF compliance. In this role, you will support security operations, drive remediation efforts, and ensure systems meet rigorous federal security requirements. ISSOs at this level help shape policy, documentation, and day to day IA oversight across complex, mission driven environments.

Certification required: IAM Level I (CAP, GSLC, Security+ CE).

Core Responsibilities

• Deploy and configure security scanning tools for continuous monitoring
• Provide written and verbal analysis of security architecture, vulnerabilities, and risk assessments
• Manage security related tickets, system changes, firewall updates, SSP modifications, and account actions
• Develop, track, and implement POA&Ms to address system findings
• Prepare, review, and maintain RMF/ATO documentation in accordance with NIST guidelines (including Rev 5)
• Support senior ISSOs in implementing and enforcing IA policies, standards, and methodologies
• Maintain system security posture across workstations, servers, routers, switches, firewalls, and related hardware
• Evaluate security solutions for classified information processing requirements
• Perform day to day security operations and support system configuration management (software, hardware, firmware)

Minimum Qualifications

• TS/SCI with Full Scope Polygraph (must already be held - no sponsorship)
• 10 years of ISSO experience supporting systems of similar scope and complexity
• Experience with at least two of the following: security tools, hardware/software security implementation, communication protocols, or encryption methods
• Bachelor's degree in Computer Science or related discipline (or 4 additional years of ISSO experience)

Preferred Experience

• Hands on RMF package development
• Experience with Rev 5 controls and updates
• Strong documentation and analysis skills within compliance driven environments