Information Security System Officer (ISSO)
Core
Owns the day-to-day security posture of classified information systems, collateral, and Special Access Programs across on-site facilities.
Role type
Senior Information Security System Officer (ISSO)
Builds
Authorized operating states for classified systems and enclaves
Domain
Defense / Classified Information Systems
Required skills
Risk Management Framework (RMF), System Security Plans (SSP), Security Assessment Reports (SAR), Continuous Monitoring, Vulnerability Scanning (Nessus/ACAS), STIG/SCAP Compliance, Incident Response, User Access Management, Enclave Configuration
Preferred skills
Special Access Program (SAP) experience, TS/SCI clearance, eMASS/Xacta, DCSA DAAPM, Linux/Windows Server Administration, Cross-Domain Solutions
Technologies
Nessus, ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, HBSS, ESS, eMASS, Xacta, Linux (RHEL/Rocky/Ubuntu), Windows Server
Responsibilities
Author and defend RMF artifacts including SSPs, SARs, and POA&Ms; Execute continuous monitoring and remediation of findings; Lead self-inspections and support government assessments; Administer and harden classified computing and network infrastructure; Manage user account provisioning and privileged access review; Serve as first-line response for classified security incidents.
Seniority
Senior, hands-on IC
