Information Systems Security Officer (ISSO)
San Antonio, TX On-site
Salary not listedJobFig found this opening at its original source and checks that it remains available.
About the role
AnaVation is seeking a highly motivated Information Systems Security Officer (ISSO) who will be responsible for implementing cybersecurity, Risk Management Framework (RMF), and continuous monitoring activities supporting Department of Defense software factories and enterprise cloud environments. The ISSO will serve as an embedded cybersecurity professional supporting one or more mission agile teams, working directly with Government leadership, Information Systems Security Managers (ISSMs), Information Systems Security Engineers (ISSEs), Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), Product Owners, software developers, and DevSecOps engineers to maintain secure cloud-native capabilities while enabling rapid software delivery through Continuous Authority to Operate (cATO). This position is full-time support within classified environments in San Antonio, Texas. The Information Systems Security Engineer (ISSO) provides support to enterprise cybersecurity operations across multiple mission value streams and classified environments by executing RMF activities, maintaining cybersecurity documentation, supporting continuous monitoring, and ensuring compliance with Department of Defense cybersecurity policies and mission security standards.
What you'll bring
- Clearance: U.S. Citizen, TS/SCI cleared within last 2 years
- CI Polygraph within last 5 years
- Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field
- Certification: One or more of the following: Security+, CySA+, CASP+ or Equivalent DoD 8140 certification
- Nine or more years supporting Department of Defense cybersecurity missions.
- Nine or more years supporting RMF implementation and cybersecurity compliance activities.
- Experience maintaining SSPs, POA&Ms, SARs, and RMF documentation.
- Experience supporting vulnerability management, STIG implementation, and continuous monitoring.
- Experience supporting Agile or SAFe software development environments.
- Experience supporting DevSecOps or enterprise cloud environments.
- Working knowledge of NIST RMF, NIST SP 800-53, CNSSI guidance, DoD cybersecurity policy, and DISA STIGs.
- Experience using cybersecurity compliance and vulnerability management tools.