Information Systems Security Officer

Responsibilities:

• Provide oversight of assigned networks to ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM) requirements.
• Support and lead RMF Assessment and Authorization (A&A) activities to obtain and maintain system ATOs under federal security requirements.
• Collaborate with ISSMs, Information System Owners, Security Control Assessors, Authorizing Officials, and engineering teams to maintain system security.
• Develop, review, and maintain Plans of Action and Milestones (POA&Ms), track deficiencies, and coordinate vulnerability remediation.
• Perform daily, weekly, monthly, and quarterly Continuous Monitoring (ConMon) reviews, primarily using Splunk.
• Assist with incident response activities and verify required system sanitization procedures.
• Identify critical and high-risk vulnerabilities and report network security posture to CISO and Authorizing Official stakeholders.
• Create and maintain security documentation, policies, procedures, and compliance reports.
• Support security assessments, risk analysis, patch validation, and continuous improvement initiatives.

Below, you will find a complete breakdown of everything required of potential candidates, as well as how to apply Good luck.

Required Qualifications:

• Bachelor's degree in a related field, or an Associate's degree with 2+ years of relevant experience, or 4+ years of relevant experience.
• IAT Level II certification minimum.
• DoD Top Secret Security Clearance is mandatory.
• Hands-on experience with RMF, ATO, federal cybersecurity, and information assurance compliance.
• Strong knowledge of NIST SP 800-37, 800-53 (Revision 4/5), 800-137, 800-39, 800-171, and related security standards.
• Experience preparing and maintaining ATO packages using eMASS and/or Xacta.
• Experience with System Security Plans (SSPs), POA&Ms, Contingency Plans, Disaster Recovery Plans, and Incident Response documentation.
• Knowledge of vulnerability assessment tools such as ACAS, Tenable Nessus, Security Center, or Nmap.
• Experience with STIG compliance, vulnerability remediation, security control assessments, risk analysis, and compliance reporting. xzgxqkn
• Familiarity with Splunk and continuous monitoring.