Information Systems Security Officer

Leidos Dynetics, operating within the Digital Sector, is seeking a talented Information System Security Officer (ISSO) to join a diverse team responsible for creating unique solutions for complex problems. With offices across the United States engaging in the defense, space, cyber and commercial fields, Dynetics provides responsive, cost-effective engineering, scientific and IT solutions.

In this role, you will be responsible for supporting our Classified Information System Cybersecurity/Information Assurance Program. This Junior ISSO role will report to the Information System Security Manager (ISSM) on all aspects of classified information system security compliance.

Location: Work is to be performed on-site in our Huntsville office with 20% telework allowable.

Clearance: You must currently hold an active DoD Secret clearance to be considered.

Primary Responsibilities

• Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness

• Investigating information system security violations and help prepare reports specifying corrective and preventative actions

• Support the creation, review and update of cybersecurity documentation and other technical writing

• Support the auditing of information systems to ensure compliance with security policies and procedures while reporting any discrepancies to the ISSM, ISO or FSO.

• Assisting in the Risk Management Framework (RMF) authorization process by developing and maintaining artifacts for the IS Body of Evidence (BoE).

• Reviewing Configuration Management (CM) requests of all associated hardware, software, and security relevant functions are maintained and documented as part of CCB approval process.

• Sanitization and release of hardware in accordance with security policies or Authorizing Official (AO) guidance.

• Testing, evaluating and application of required technical security controls and periodic inspections of information systems.

Basic Qualifications

• Bachelor's Degree and 2-4 years of relevant experience in a computer related discipline. Equivalent relevant experience may be considered in lieu of a degree.

• Currently hold active DoD 8140/DoD Cyber Workforce Framework (DCWF) work role (for example, CompTIA Security+, CySA+, CISSP, CISM or equivalent), or the ability to otherwise satisfy DoD 8140 qualification requirements through approved education, training, or experience.

• Must currently hold an Active Secret Clearance

​

Relevant Experience Considered:

• Cybersecurity, systems security or hardening, Information Technology

• Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Guide (DAAG), National Industrial Security Program Operating Manual (NISPOM)

• Experience working with and/or supporting computer technologies (such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)

• Some understanding of security configurations across multiple operating systems in various environments, including Windows, Linux, utilizing Active Directory/Group Policy, Delinea, etc. is required.

• Candidate must be highly organized, self-motivated with excellent documentation and time management skills and

• Must possess the ability to communicate well with others and work with minimal supervision.

Preferred Qualifications:

• Some Experience with IT (Windows, Linux) and/or security related certifications (e.g., ISC2 Certified in Cybersecurity (CCC)certification, CompTIA CySA+ certification, GIAC Certified Incident Handler (GCIH) certification)

• Experience working in DoD classified operating and/or laboratory environments

• Some Experience with various information system security tools that address vulnerability analysis and mitigation. These may include SPLUNK, SolarWinds, Trellix, Tenable, and SCAP.

• Familiarity with implementation of Government directives and policies derived from NIST, STIG, DoD, or other Government Regulatory compliance standards within a professional industry

• Familiarity in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF), eMASS

• Ability to support technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT) with Team support

• Familiarity with