L

Leidos

Builds technology for defense and civil agencies

Information System Security Officer - ISSO

Security Governance, Risk & CompliancePosted on Nov 12
Full-timeChantilly, VA, USA$107.9k - $195.1kIn-person

About the Job

Requirements

  • Must currently possess an active TS/SCI with Polygraph clearance.
  • A BA or BS degree with 8+ years of experience, or a Master's degree with 5 years of experience, in a broad range of assignments, including 4 years focused on security and/or ISSO work; additional experience and certifications may substitute for the degree.
  • Must have CISSP.
  • Security+ is strongly desired.
  • GSEC Security Essentials.
  • GIAC Information Security Fundamentals.

Responsibilities

  • Provide consulting to agencies on Requests for Service for the design, development, and deployment of Ongoing Assessment, Ongoing Authorization, and other Information Assurance initiatives.
  • Ensure system security measures comply with applicable government policies.
  • Ensure system security requirements are addressed throughout the project and system lifecycle.
  • Review system security Assessment and Authorization package submissions for consistency, completeness, traceability, and compliance.
  • Develop and maintain Plans of Action and Milestones (POA&Ms), facilitate their appropriate closure, and coordinate remediation activities with the agency-designated security point of contact or ISSO.
  • Develop, document, and present information system security education, awareness, and training activities for users and others as appropriate.
  • Manage multiple high-visibility security projects and adjust to changing customer priorities while meeting mission requirements.
  • Control, label, and virus-scan data, and transfer it appropriately between information systems at varying classification levels.
  • Perform Nessus scans and other vulnerability assessments and interpret the results.
  • Provide support for daily inquiries, data calls, and information collection, and maintain status documents and project tracking.
  • Perform continuous monitoring to enforce client security policies and procedures, and create processes that increase system owners' visibility into impacts on system security posture.
  • Monitor configuration management changes and assess the impact of modifications and vulnerabilities for each system.
  • Ensure effective controls and processes are in place and operating effectively to maintain a strong system security posture.
  • Perform vulnerability and risk assessment analyses to support Assessment and Authorization activities.
  • Audit and monitor incident response communications and other key operational processes for adherence to mandated security policies.

Desired Qualifications

  • Security+ is strongly desired.

About the Company

Leidos

Builds technology for defense and civil agencies

Leidos develops technology and runs services for defense, intelligence and civilian agencies, as well as healthcare and commercial customers. It combines software and engineering work with systems integration, building secure networks and equipment used in demanding operations. Its portfolio includes medical services, energy infrastructure design and technology that supports military missions, linking specialist businesses under one parent. Customers pay through contracts for delivered systems and services, with payment tied to labor, costs or agreed project milestones. Leidos traces its roots to a company founded in 1969 and is headquartered in Reston, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1969

Recently Posted Jobs

Explore more opportunities at Leidos

See more jobs