Information Systems Security Officer (ISSO)
Colorado Springs, CO, United States
Full Time Senior-level / Expert USD 77K - 187K
Arcfield
Arcfield was purpose-built to defend against the near-peer threat through innovations in systems engineering and integration, modeling, simulation and analysis, space and launch support, cybersecurity and test range support.Overview
Arcfield is a leading provider of full lifecycle, mission-focused systems engineering and integration capabilities to the U.S. government and its allies. The company has more than 60 years of proven experience providing advanced engineering and analysis, IT and C5ISR capabilities to support our nation’s most critical national security missions. Headquartered in Chantilly, VA and with 16 offices around the world, Arcfield employs approximately 1,200 engineers, analysts, IT specialists, and other professionals who put our customers’ missions first, helping them solve their most complex challenges through innovations in modeling, simulation and analysis, digital transformation and C5ISR. Visit arcfield.com for more details.
Responsibilities
- Career level with a complete understanding and wide application of technical principles, theories and concepts.
- Working under only general direction, provides technical solutions to a wide range of difficult problems.
- Independently determines and develops approach to solutions. Prepare, maintain and implement System Security Plans that accurately depict the customer’s contractual requirements.
- Responsible for the oversight and accountability of day-to-day security operations of all classified information systems.
- Support all disciplines within the security program and ensure business needs are met.
- Works directly with program managers and ISSM on all phases of system life cycle development.
- Assist the ISSM working with US Government Security Control Assessors (SCAs) and Authorizing Officials (AOs) to develop a comprehensive RMF package including System Security Plans (SSPs), Information Continuous Security Monitoring Plans, and a Body of Evidence to support system authorization.
- Conducts ongoing vulnerability testing of the information system to verify security features and operating controls are functional, effective and meet government standards.
- Interact with internal and external customers or government security officials to perform security duties, address routine information security matters with employees regarding issues, report preparation and system security access briefings, etc.
- Develops and implements facility procedures to govern marking, handling, controlling removing, transporting, sanitizing, reusing and destroying media and equipment containing classified equipment.
- Responsible for changes to the classified system components, environment and location, including temporary relocation to another classified area.
- Assists ISSM in reporting and mitigation of information system security incidents. Initiates protective and/or corrective measures designed to prevent future incidents.
- Thorough understanding of Automated Information Systems and specifically chapter 8 of National Industrial Security Program Operating Manual (NISPOM).
- Proficiency with various computer applications and testing tools (Word, Excel, PowerPoint, SCC, STIG, SPLUNK, VEEAM, etc.).
- Strong background in certification and accreditation process of information systems using eMASS and ability to write, review and coordinate system security plans.
Qualifications
Required Education, Experience, & Skills
- Bachelor's in Computer Science, Information Systems, Engineering or related discipline plus 5 - 7 years of experience, or a Master's in Computer Science, Information Systems, Engineering or related discipline plus 3 to 5 years of experience.
- Must POSSESS and be able to maintain a TS clearance
- Security+ or DOD 8140.03 (8570) certifications or working towards certification.
- Experience with auditing various systems (Windows, Linux, and peripherals) with SPLUNK or other audit reduction tools.
- Ability to install and run the SCAP Compliance Checker (SCC) utilizing the latest Security Technical Implementation Guides (STIGS) and take appropriate correctional actions.
- Understanding of simple networks, operating systems (Microsoft Server, Windows, Linux), and computer functions.
Desired Qualifications & Skills
- High level of personal motivation and initiative to learn and acquire new skills and adapt seamlessly to an ever-changing security environment.
- Self-motivated individual who requires limited supervision and has excellent time management skills.
- Strong organizational and communication skills—particularly in technical reports and presentations.
- Able to interface with other team members, other security disciplines and program personnel.
- Experience in COMSEC implementation and management.
- Microsoft Server 2016/Windows 10, or higher administration experience
- RedHat 8, or higher administration, including workstations and server experience.
- Experience with system builds, shell scripting, command line, troubleshooting, etc.
- Antivirus software management including definition updates, scanning, and configuration.
Equal Pay Act
This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. Min: $77,826.62 Max: $187,016.21EEO Statement
EEO
Arcfield proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active-Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.
Tags: Antivirus Audits Clearance Compliance Computer Science DoD DoDD 8140 DoDD 8570 eMASS Industrial Linux Monitoring NISPOM RMF SCAP Scripting Splunk STIGs System Security Plan Windows
Perks/benefits: Career development Health care Insurance Relocation support Wellness
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Cyber Security Specialist jobs
- Open Product Security Engineer jobs
- Open Cybersecurity Analyst jobs
- Open Staff Security Engineer jobs
- Open Chief Information Security Officer jobs
- Open Senior Information Security Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Senior Penetration Tester jobs
- Open Consultant SOC / CERT H/F jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Sr. Security Engineer jobs
- Open Security Researcher jobs
- Open IT Security Engineer jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Windows-related jobs
- Open CISM-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open CISA-related jobs
- Open Analytics-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open SaaS-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open Malware-related jobs
- Open Forensics-related jobs
- Open DevOps-related jobs
- Open IDS-related jobs
- Open Security Clearance-related jobs
- Open CEH-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs