Information Security System Officer (ISSO)

Job summary

Responsibilities

This ISSO owns the day-to-day security posture of EpiSci's classified information systems, collateral and Special Access Program, across our Irvine and Poway facilities.

• Maintain accredited classified systems in an authorized operating state while meeting program delivery timelines
• Author, update, and defend RMF artifacts: System Security Plans (SSP), Security Assessment Reports (SAR), POA&Ms, Risk Assessment Reports, Configuration Management Plans…
• Execute continuous monitoring: ACAS and Nessus vulnerability scanning, SCAP and STIG compliance checking, audit log review, and remediation tracking against CAT I, II, and III…
• Support the design, development, and implementation of procedures and systems for secure facilities, and ensure facility compliance with requirements for classified information…
• Conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, threats, and protection needs, and recommend mitigations

What they're looking for

• Bachelor's degree in a relevant field, or a minimum of 5 years of ISSO, ISSE, or cybersecurity policy and engineering experience in a classified environment
• DoD 8570/8140 IAM Level I/IAT Level 2 (Security +) as a condition of employment
• Demonstrated proficiency applying RMF and writing authorization packages, with working knowledge of ICD-503, JSIG, and the NIST 800 series (800-53, 800-37, 800-171)
• Hands-on experience with security tooling: NESSUS and ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, and HBSS or ESS
• Experience designing, building, and maintaining information system enclaves, including the underlying computing hardware and network architecture