Information System Security Officer

In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

We are seeking an experienced Information System Security Officer to support a Defense Counterintelligence and Security Agency Portfolio Acquisition Executive managed service provider contract. This mid-level role requires a highly autonomous, TOP SECRET-cleared cybersecurity professional who will serve as the cybersecurity point of contact and ISSO/ISSE for key information systems within cleared environments.  

You will help protect systems supporting national security programs and own the security posture of assigned systems throughout the system lifecycle—from design and authorization through continuous monitoring and ongoing operations. You will ensure systems remain compliant, monitored, appropriately documented, and prepared for security assessments and authorization activities.  

You will drive Risk Management Framework activities from end to end, validate system security requirements, develop and assess security control implementations, design continuous monitoring strategies, and manage vulnerabilities from identification through remediation. You will document and track findings through Plans of Action and Milestones and support the preparation and maintenance of authorization artifacts, including System Security Plans and Security Assessment Reports.  

This role requires between 50% and 100% on-site support in Herndon, Virginia, or Hanover, Maryland, including work in Sensitive Compartmented Information Facility environments as mission priorities require. 

What You'll Be Doing:

• Drive Risk Management Framework (RMF) activities for assigned information systems 

• Design and implement system continuous monitoring plans 

• Perform vulnerability management, drive remediation with system stakeholders, and manage Plans of Action and Milestones (POA&Ms) 

• Serve as the key point of contact for system reporting and communications to the ISO, ISSM, and customer leadership, as applicable, delivering excellent customer support 

• Work proactively across multiple systems and competing priorities 

• Collaborate and adapt to support the success of the broader team and the Mission.  

• Collaborate with stakeholders to identify challenges and implement solutions 

What Desired Skills You'll Bring:

• Active TOP SECRET security clearance.  

• U.S. citizenship and continued eligibility to maintain the required security clearance.  

• Bachelor’s degree in cybersecurity, information assurance, information systems engineering, computer science, or a related field; equivalent professional experience may be accepted in lieu of a degree.
• At least 5+ years of relevant cybersecurity, information assurance, systems security engineering, or information technology experience. 
• Eligibility for enrollment in the DCSA Personnel Assurance Program.  

• Current DoD 8570/8140 Information Assurance Technical Level II certification, such as CompTIA Security+, SSCP, GSEC, or another qualifying certification.  

• Demonstrated ability to work independently, interact directly with customers and technical stakeholders, and serve as an escalation point for cybersecurity and compliance issues.  

• Experience owning cybersecurity, RMF, and compliance activities for DoD or other federal government information systems in an ISSO capacity.  

• Experience designing, architecting, validating, or implementing security controls for DoD or federal government information systems in an ISSE capacity.  

• Direct experience developing, reviewing, or maintaining RMF assessment and authorization documentation, including:   

• Experience with System Security Plans, Security Assessment Reports, Security control implementation statements, Continuous monitoring plans, Risk assessments, Plans of Action and Milestones  and Authorization decision support packages .

• Working knowledge of the NIST Risk Management Framework, including NIST SP 800-37 and NIST SP 800-53.  

• Experience supporting vulnerability management, remediation planning, risk acceptance, and POA&M management.  

What Desired Skills You'll Bring:

• EPrior experience serving as an ISSO or ISSE in a DoD or DCSA environment.  

• Experience supporting Tier 3 system RMF activities for federal cloud-based systems.  

• Working knowledge of Amazon Web Services and Microsoft Azure Government environments, including cloud security architecture, planning, design, and operations.  

• Experience securing systems hosted in classified, government, or hybrid cloud environments.  

• Experience with eMASS or a comparable governance, risk, and compliance platform.  

• Familiarity with systems security engineering documentation, such as: Cybersecurity strategies, Program Protection Plans, Information Support Plans, Security architecture and engineering documentation.  
• Experience with security information and event management platforms, particularly Splunk Enterprise Security.  

• Familiarity with security orchestration, automation, and response platforms, including Splunk SOAR.  

• Experience supporting security monitoring, incident response, or Security Operations Center operations.  

• Experience developing or validating security monitoring and incident-detection use cases.  

• Knowledge of network security, system security, security logging, and event-monitoring requirements.  

• Experience engineering or assessing cross-domain solutions, system interconnections, or trusted relationships between external systems.  

• DoD 8570/8140 IAT Level III or an equivalent advanced certification.  

• Professional cybersecurity certification, such as CISSP, CASP+, CISM, or equivalent.  

• AWS or Microsoft Azure certification, such as AWS Certified Solutions Architect, AWS Certified Security, Azure Solutions Architect Expert, or Azure Security Engineer Associate.  

• Splunk certifications or accreditation in Splunk Enterprise Security, IT Service Intelligence, User Behavior Analytics, SOAR, or Splunk Cloud. 

Security Clearance Requirement:

An active Top Secret security clearance is required for this position.​This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $103,500.00 - $181,100.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer tohttps://www.parsons.com/fraudulent-recruitment/.