Full Visibility

Information Systems Security Officer (ISSO)

Posted 5 Hours Ago

Be an Early Applicant

Quantico, VA, USA

In-Office

150K-200K Annually

Senior level

Information Technology • Software • Analytics • Cybersecurity

The Role

The ISSO oversees information system security programs, RMF and SAA processes, ATO packages, vulnerability and compliance scanning, STIG and IAVA reviews, security documentation, POA&M management, incident and contingency planning, and cybersecurity control implementation. The role advises customers, coordinates remediation with infrastructure and development teams, represents program security interests, and supports federal cybersecurity and FISMA compliance. This is an onsite position in Quantico, Virginia requiring an active Top Secret clearance.

Summary Generated by Built In

Full Visibility is seeking an Information Systems Security Officer (ISSO) to work in Quantico, VA. Candidate must possess an active Top Secret clearance.

The ISSO will work closely with customers to ensure the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs; infrastructure; application; Security Assessment and Authorization (SAA), IA policy directives (PD) and guides (PG); and IA Security tools, such as Tenable.io, Nessus Pro, NMap, etc. The candidate will coordinate with other ISSOs to ensure that their requirements for interconnection, policy, and procedures are met and all documentation is provided and updated as necessary. The ideal candidate will advise the customer on the use of methods such as encryption technology, vulnerability analysis, and security management standards to protect systems and applications to meet Federal Information Security Modernization Act (FISMA) requirements.

The successful candidate will prepare documentation such as, Configuration Management Plans, Incident Response Plans, Information System Contingency Plans, and Plan of Action and Milestones (POA&M) to ensure compliance with PDs and PGs and Federal IA requirements. The candidate will identify IA vulnerabilities and coordinate with the Infrastructure and Development teams to correct, mitigate, or apply for an exception via the POA&M processes. The candidate will review vulnerability and compliance SCAP and/or DISA STIGs scans on the infrastructure and applications to ensure patch and configuration compliance (on-premises and in the cloud). The successful candidate will prepare SAA package(s) to obtain and maintain an authority-to-operate (ATO), authority-to-test (ATT), or other SAA authority types for all systems and applications. The ISSO will attend and represent program security interests in various meetings within and outside of the program, and schedule and conduct meetings with pertinent program personnel to address findings to determine the appropriate path forward and document within the CMP and, if necessary, POA&M.

Requirements

● Active Top Secret Clearance; This position may require the successful completion of a Counterintelligence (CI) Polygraph

● Bachelor's degree in Information Systems Technology, Computer Science, Engineering, or related field. and 5+ years of experience in cybersecurity or risk management

In lieu of BS, must have 9+ years of experience with any of the following certifications: CISSP, CISM, CAP, CASP+, etc.

● Experience with application installation, configuration, and operational procedures in support of cybersecurity mandates

● Ability to conduct the entire Risk Management Framework (RMF) through all seven steps

● Experience with supporting information assurance and cybersecurity development of security plans or packages supporting Assessment and Authorization (A&A) of IT systems Authority to Operate (ATO), including the implementation and assessment of cybersecurity controls

● Experience with cyber continuous diagnostics and mitigation tools, such as Splunk and Graylog

● Experience reviewing NESSUS/ACAS vulnerability scans and reviewing audit logs, including Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Alerts (IAVA)

● Ability to assess current and evolving security threats in an operational environment

● Ability to work ONSITE in Quantico VA

This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: local market conditions, and candidate qualifications, such as skills, education, and experience. A reasonable salary range for this position is $150-200k

#CJ

Benefits

About Full Visibility

Full Visibility LLC is a federally certified Small Business that delivers innovative technical solutions to address the nation’s most critical and sensitive missions. Founded in 2006, our extensive technical capabilities and expertise support federal and state government agencies with over 100 cleared technical experts specializing in mission solution areas of Digital, AI & Analytics, Cyber, and Engineering.

Our technologists are recognized as industry leaders with demonstrated expertise in innovating and transforming our client environments in support of national security and law enforcement. Headquartered in Tysons, VA – with locations in Chantilly, VA, Quantico, VA, and Huntsville, AL – we have specialized experience supporting sensitive missions and an understanding of the niche skillsets required to overcome challenges in these environments. Our clients benefit from an enthusiastic and reliable team of talent with high employee morale and retention based on our FULL EMPLOYEE approach where each employee’s professional and personal well-being is considered. Our focus on employee development, success, and morale is demonstrated by our consecutive top ranking as the Best Place to Work by the Washington Business Journal as a thirteen-time honoree. Full Visibility has also been included on the Inc. 5000 Fastest-Growing Private Companies in America list nine times since 2014.

Full Visibility currently has over 20 active contracts with 100 billable staff supporting 21 clients in the Intelligence and Law Enforcement communities. As part of our commitment to partnerships, we are teammates with 13 prime contract holders. Additionally, Full Visibility holds contracts on several vehicles, such as GSA Multiple Award Schedule (MAS), DISA SETI, DIA SITE III, HCaTS, as well as several classified vehicles. Our portfolio includes experience serving the Department of Defense, Department of Homeland Security, Department of Justice, and Department of Veterans Affairs, as well as commercial clients.

Contact [email protected] for any questions or concerns related to this position or our company.

To review our company benefit offerings please visit https://www.fullvisibility.com/benefits.

Skills Required

Active Top Secret security clearance
Bachelor's degree in Information Systems Technology, Computer Science, Engineering, or a related field
At least 5 years of experience in cybersecurity or risk management
In lieu of a bachelor's degree, at least 9 years of relevant experience
CISSP, CISM, CAP, CASP+, or similar certification when using the experience-based degree alternative
Experience with application installation, configuration, and operational procedures supporting cybersecurity mandates
Ability to conduct all seven steps of the Risk Management Framework
Experience developing security plans or Assessment and Authorization packages for IT systems and ATOs
Experience implementing and assessing cybersecurity controls
Experience with continuous diagnostics and mitigation tools such as Splunk and Graylog
Experience reviewing Nessus or ACAS vulnerability scans and audit logs
Experience reviewing Security Technical Implementation Guides and Information Assurance Vulnerability Alerts
Ability to assess current and evolving security threats in an operational environment
Ability to work onsite in Quantico, Virginia
Successful completion of a Counterintelligence Polygraph may be required

View all jobs at Full Visibility

View Full Visibility Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

100 Employees

Year Founded: 2006

What We Do

Full Visibility is a federally certified small business and IT solutions provider serving federal and state government agencies, especially national-security and law-enforcement missions. The company delivers technology consulting, project and program management, systems analysis, software development, data and data-management services, staffing, cybersecurity, analytics, engineering, infrastructure, networking, business intelligence, and digital transformation solutions through cleared technical experts with a people-first culture.