Support mission-critical national security programs as the lead Information Systems Security Officer (ISSO) overseeing RMF authorization activities
Lead RMF authorization activities including system categorization, control selection, assessment preparation, and ongoing monitoring
Oversee vulnerability management cycles, including ACAS reviews, CVE analysis, and mitigation coordination
Direct the development and maintenance of A&A artifacts
Manage audit log collection, review, dashboard analysis, and reporting through SPLUNK
Ensure system incident response and recovery efforts follow approved procedures
Serve as the central point of contact for security posture and compliance guidance

5+ years of experience with NIST 800-53, ICD 503, RMF, and secure system operations
Experience developing and maintaining A&A artifacts
Experience with STIGs, Tenable scanning, mitigation of ACAS results, CVE research, and vulnerability remediation coordination
Experience solving technical problems quickly and identifying opportunities to automate repetitive processes
Experience building or reviewing SPLUNK dashboards and audit analysis
Experience with Cybersecurity in the IC community
Knowledge of network security principles and practices
TS/SCI clearance with a polygraph
HS diploma or GED
IAM Level III certification, such as CISSP, GSLC, or CISM

Information Systems Security Officer

Key skills