At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.
phia, LLC is seeking an experienced Information System Security Officer (ISSO) and Xacta SME to support a Federal agency responsible for protecting vital national security information and technologies, representing the intellectual property of incalculable value throughout nearly thirty sites and laboratories nationwide. Work will be performed on-site in Washington, DC. Must have active Top Secret, and be able to achieve Q clearance.
What You’ll Do
- Advise the information system owner and CISO/ISSM on system security.
- Define access privileges, security controls, and resources to protect information systems.
- Facilitate tracking, handling, and reporting security events and incidents per government procedures.
- Evaluate and escalate incidents, implementing mitigation techniques according to customer guidelines.
- Collaborate with team members to implement an efficient cyber incident management system.
- Research IT security trends to enhance security measures.
- Analyze network traffic and logs to identify threats, recommend countermeasures, and mitigate network damage.
- Maintain network, server, and security integrity per regulatory and departmental policies.
- Create and maintain system documentation to ensure certification and accreditation throughout the Authority to Operate lifecycle.
- Recommend and implement security improvements based on assessments and trends.
- Manage Information Security Vulnerability Management, Alerts, Technical Advisories, and Bulletins.
- Develop and conduct security training and awareness programs.
- Assist in developing and implementing security policies and procedures for regulatory compliance.
- Assess and manage risks to information processing, storage, and transmission.
- Maintain, administer, and configure Xacta, providing backend support.
- Oversee Xacta integration into security processes and workflows.
- Collaborate with stakeholders to utilize Xacta for compliance and risk management.
- Troubleshoot and resolve Xacta configuration and operational issues.
Education + Requirements
- BA or BS degree and 8 years of relevant experience
- 6+ years of experience with information assurance or cybersecurity
- Demonstrated expert knowledge and experience with maintaining, administering, using, and configuring Xacta (backend experience required.
- Experience with supporting system security and authorization processes, RMF, and ATOs
- Experience with NIST 800-37, NIST 800-53, or Intelligence Community Directive 503 requirements
- Experience with ACAS and vulnerability databases including Tenable Nessus, NVD, and NIAP
- Ability to report IT security events or incidents based on policies and procedures
- Ability to provide on-site, full-time support in a client environment
Required Certifications
- AITI III level certification
- CASP+ CE (CompTIA Advanced Security Practitioner)
- CCNP Security (Cisco Certified Network Professional Security)
- CISA (Certified Information Systems Auditor)
- CISSP (Certified Information Systems Security Professional) or Associate
- GCED (GIAC Certified Enterprise Defender)
- GCIH (GIAC Certified Incident Handler)
- CCSP (Certified Cloud Security Professional)
Security Clearance Requirements
- U.S. Citizenship
- Active Top Secret clearance
- Q clearance (or willing and able to achieve Q clearance)
#LI-LC1
Who You Are
A proactive problem solver that appreciates the challenges of working in a fast-paced, dynamic environment.
Intellectually curious with a genuine desire to learn and advance your career.
An effective communicator, both verbally and in writing.
Customer service-oriented and mission-focused.
Critical thinker with excellent problem-solving skills
If your experience and qualifications aren’t a match for this position, you will remain in our database for consideration for future opportunities that may be a better fit.
Who We Are
phia, LLC is a Northern Virginia-based, small business established in 2011 with a focus on Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, and Information Assurance/Security. we proudly support various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.
phia values work-life balance and offers the following benefits to full-time employees:
Comprehensive medical insurance to include dental and vision
Short Term & Long-Term Disability
401k Retirement Savings Plan with Company Match
Tuition and Professional Development Assistance Flex Spending Accounts (FSA)
phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.