Information System Security Engineer (ISSO)

About This Role

Evaluate security configurations, advise clients on cyber risks, and coordinate with various teams to support security controls implementation and risk analysis for mission-critical systems within the Defense Intelligence Agency's global CIO enterprise.

Responsibilities

• Assess security configurations and conduct tools assessments
• Advise clients on cyber risks and develop mitigation plans
• Coordinate work with in-house teams, subcontractors, and vendors
• Implement and oversee security practices and procedures for systems
• Support security authorization reviews and risk analysis

Requirements

• Active TS/SCI clearance
• Willingness to take a polygraph exam
• 3+ years of experience as an ISSO or ISSA
• Experience with security configuration analysis and implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels
• Experience with eMASS or Xacta IA Manager
• Ability to perform risk analysis
• DoD 8570 IAT Level II Certification (or equivalent)
• Ability to obtain a DoD 8570.01-M CSSP Infrastructure Support Certification

Qualifications

• Associate’s degree with 5+ years, Bachelor’s degree with 3+ years, or Master’s degree with 1+ years supporting IT projects
• 3+ years of experience as an ISSO or ISSA

Nice to Have

• Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools
• Experience assessing configuration changes and drafting tool implementation CONOPS
• Experience with cyber tools such as Ansible, Terraform, Splunk, or STIG Viewer
• Knowledge of cloud-native security tools including HBSS
• Knowledge of Zero Trust principles
• Ability to plan and conduct security authorization reviews
• AWS, Azure, or GCP Certification

Skills

* Required skills

Certifications