Information Systems Security Offer (ISSO)

Seeking a career with a sense of purpose, work life balance, and growth opportunities … There’s a place for you at Leidos! At Leidos, we are committed to making the world safer, healthier, and more efficient through technology, engineering, and science. You would be a valued member of global team providing services across civil, defense, health, and intelligence business lines. At Leidos, team member career development, flexibility, and well-being are priority and is supported by consistent leadership engagement, an experienced human relations staff, and numerous employee support programs.

Use your unique talents and make an immediate impact…

The Leidos Defense group has an opening for a highly motivated individual. The Information Systems Security Officer (ISSO) position at MacDill AFB, FL supports the Global Solutions Management-Operations II (GSM-O II), Joint Communications Support Element (JCSE). The JCSE team provides en-route, early entry, scalable C4 support to Regional Combatant Commands, Special Operations Command, and other agencies. In this role, you will be responsible for ensuring that the systems security meets all DoD/JCSE requirements and design, facilitating system assessments, documentation and providing hands-on security assessment support. Key elements of this position include: Perform cybersecurity assessments and assist with evaluation and hardening of complex IT systems; and helping JCSE comply with Risk Management Framework (RMF) cybersecurity requirements.

Responsibilities include:

• Develop Security plan of action and milestones (POA&M) for all open security findings identified on the end-to-end enterprise infrastructure (Data Center, SATCOM Gateway, and deployed kits).

• Develop, staff, and maintain security-related statutory/regulatory documentation as required by DoDI 8510, including but not limited to: Cybersecurity Strategy (CS) and Program Protection Plan (PPP).

• Conduct weekly meetings to track the security process, status of the accreditation package and finding resolution on the enterprise infrastructure.

• Maintain documentation identifying what cybersecurity STIG, checklist, or control requirements apply for every component or software in the enterprise infrastructure (Data center, SATCOM Gateway, and deployed kits).

• Administration of IA scans with appropriate and approved tools (e.g. Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), etc.) of all items as directed. Scans shall be run using the most recent security definitions of each tool.

• Track all implementation information for assurance directed guidelines for all hardware as well as applicable software ensuring proper security for the JCSE Enterprise. Provide tracking and summary reports based on findings to leadership. Implementation actions include but are not limited to STIGs, compliant patch implementation/management, Information Assurance Vulnerability Management (IAVM) compliance, integration/ implementation of network or firewall approved devices, and react appropriately to cyber threats.

• Support and perform DoD Risk Management Framework (RMF) in accordance with CNSSI 1253 and NIST 800-53 (all revisions) for IA controls; 8570/8140 for IA Workforce training and DCID 6/3 for protection of sensitive compartmented information. This also includes the updates required for the JCSE packages and all updated instructions which support the Assess and Authorize (A&A) process.

• Assist with developing and maintaining system policies and procedures for network security, virus protection, user accounts, maintenance, and utilization.

• Provide technical support and guidance to the cybersecurity team as part of maintaining the JCSE IA processes and procedures in support of computer network defense in-depth protection for the JCSE enterprise infrastructure. Recommend network configuration, policy, training, operational or other changes/updates based on assessed risks.

• Coordinate with internal and external organizations, agencies, and activities to support resolution of security issues, accreditation and waiver requests that impact the ability to obtain connection approval.

• Provide system administrator (ex. Linux, Windows, Firewalls, Intrusion Prevention/Detection Systems, End Point Security) support installing, operating, maintaining, troubleshooting, administrating, and cybersecurity hardening of operating systems on both the classified and unclassified systems (SIPR and NIPR).

• Maintain configuration documentation for the JCSE Enterprise to include network diagrams, technical sensor/administrative & polic