L

Leidos

Builds technology for defense and civil agencies

Information System Security Officer

Security Governance, Risk & CompliancePosted on Nov 11
Full-timeArlington County, Arlington, VA, USA$87.1k - $157.4k

About the Job

Requirements

  • DoD 8140 IAT Level II certification is required.
  • A bachelor's degree and 4+ years of prior relevant experience are required; additional experience may be considered in lieu of the degree.
  • At least 2 years of experience working with eMASS, RMF, and STIGs are required.
  • An active Top Secret/SCI clearance is required, along with the ability to successfully pass a polygraph exam.
  • Experience with eMASS is required.

Responsibilities

  • Establish and implement security procedures and practices in support of customer goals and current DoD regulations.
  • Develop and update Assessment and Authorization documentation (Body of Evidence) for management and continuous monitoring of information systems.
  • Use knowledge of the Information System and Information Assurance and cybersecurity requirements to validate security policies and procedures in the System Security Plan, customer policies, and regulations, and ensure local policies are followed.
  • Initiate authorization or re-authorization efforts for new or expiring systems, and coordinate, schedule, and attend required meetings.
  • Serve as the System Information System Security Officer for various systems.
  • Take corrective action to resolve identified problems and ensure systems are operated, maintained, and disposed of in accordance with established policies and procedures.
  • Perform security audits in accordance with established procedures; develop processes for managing, reviewing, and retaining security audit data; and decide on and implement corrective actions to resolve audit discrepancies.
  • Author and review information-system security documentation and submit it to Enterprise Mission Assurance Support Service (eMASS).
  • As an Information Assurance subject matter expert, ensure system security requirements are addressed during all phases of the System Development Life Cycle.
  • Conduct ongoing security reviews and tests to verify system security features and controls are functional and effective, and take corrective action to resolve identified vulnerabilities.
  • Provide security engineering reviews of proposed changes or additions to information systems, including hardware, software, or connectivity, and advise the Information System Security Manager of their security relevance.
  • Create and maintain processes and procedures for members of the ISSO team.
  • Support the ISSO Team Lead in conducting lessons-learned activities to improve the ISSO team's productivity and efficiency.
  • Communicate with internal team members across multiple areas and customer team members.
  • Review manual STIG checklists using STIGViewer.
  • Review ACAS scans.
  • Develop a Project Management Plan to attain an Authorization to Operate.

Desired Qualifications

  • Experience with ESS, ACAS, Nessus, or Splunk is preferred.

About the Company

Leidos

Builds technology for defense and civil agencies

Leidos develops technology and runs services for defense, intelligence and civilian agencies, as well as healthcare and commercial customers. It combines software and engineering work with systems integration, building secure networks and equipment used in demanding operations. Its portfolio includes medical services, energy infrastructure design and technology that supports military missions, linking specialist businesses under one parent. Customers pay through contracts for delivered systems and services, with payment tied to labor, costs or agreed project milestones. Leidos traces its roots to a company founded in 1969 and is headquartered in Reston, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1969

Recently Posted Jobs

Explore more opportunities at Leidos

See more jobs