Isso Issm Jobs in Athens, AL (NOW HIRING)

Description

Leidos Dynetics, within the Digital Sector, is seeking a talented Information System Security Officer (ISSO) to join a diverse team to create unique solutions for complex problems. With offices across the United States engaging in the defense, space, cyber and commercial fields, Leidos Dynetics provides responsive, cost-effective engineering, scientific and IT solutions.

Location: Work will be performed onsite in Huntsville, AL, and up to 20% telework will be allowed.

Clearance: You must currently hold an active DoD Secret clearance to qualify for consideration.

As the Information System Security Officer (ISSO), you will be responsible for supporting our Classified Information System Cybersecurity/Information Assurance Program. You will report to the Information System Security Manager (ISSM) on all aspects of classified information system security compliance.

Primary Responsibilities

The ISSO is responsible for the day-to-day cybersecurity oversight and compliance of classified information systems, supporting the maintenance of system authorizations and continued compliance with applicable DCSA, DoD, and organizational security requirements. You will:

• Perform ongoing security monitoring and compliance assessments of classified information systems and report identified deficiencies, risks, and noncompliance to the ISSM and appropriate stakeholders.

• Support the Risk Management Framework (RMF) lifecycle, including development, review, and maintenance of authorization artifacts and the system Body of Evidence (BoE).

• Evaluate implementation and effectiveness of security controls and maintain supporting evidence required for continuous monitoring, assessments, and authorization activities.

• Perform technical security assessments, including Security Technical Implementation Guide (STIG), Security Content Automation Protocol (SCAP), vulnerability scanning, and configuration reviews.

• Analyze security findings and vulnerabilities, coordinate remediation activities with system administrators and engineering teams, and validate corrective actions.

• Review Configuration Management (CM) requests within delegated authority for hardware, software, system configuration, and security-relevant changes. Ensure changes are appropriately documented, assessed for security impact, and processed through the Configuration Control Board (CCB).

• Provide cybersecurity guidance to system administrators, engineers, program personnel, and system owners regarding secure configurations, system changes, and implementation of security requirements.

• Conduct periodic technical and administrative assessments to validate continued compliance with approved security plans, procedures, and authorization requirements.

• Support security incident response activities, including investigation, documentation, evidence preservation, containment, corrective actions, and reporting.

• Support sanitization, declassification, transfer, and release of information system hardware and media in accordance with applicable security requirements and Authorizing Official (AO) guidance.

• Develop, review, and maintain cybersecurity documentation, procedures, system security plans, assessment artifacts, and other technical documentation.

• Evaluate and support implementation of new cybersecurity processes, technologies, and tools to improve system security, compliance, and operational effectiveness.

• Provide cybersecurity education and guidance to system users, administrators, and program personnel as required.

• Support DCSA assessments, security reviews, inspections, and other internal or external cybersecurity assessment activities.

Basic Qualifications

• Bachelor's degree coupled with 4+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience, or a Master's degree with 2+ years of relevant experience. Additional relevant experience may be considered in lieu of a degree consistent with Leidos job-level requirements.

• Must meet, or be capable of meeting, applicable DoD 8140/DoD Cyber Workforce Framework (DCWF) qualification requirements for the assigned work role through approved certification, education, training, or experience.

• Possess working knowledge of the Risk Management Framework (RMF) and implementation and assessment of cybersecurity controls within regulated or classified environments.

• Demonstrated experience performing information system security assessments, compliance auditing, vulnerability assessment, system hardening, or security configuration management.

• Possess working knowledge of Windows and/or Linux operating systems and associated security configurations.

• Direct experience interpreting and applying cybersecurity requirements such as NIST SP 800-53, DISA STIGs, DCSA/DoW security requirements, or comparable government cybersecurity standards.

• Ability to analyze technical security findings, identify risk, recommend corrective actions, and communicate security requirements to both technical and nontechnical stakeholders.

• Demonstrated ability to develop and maintain detailed cybersecurity documentation and objective evidence supporting system compliance.

• Possess strong organizational, analytical, written, and verbal communication skills with the ability to independently manage multiple cybersecurity activities and priorities.

• Able to work collaboratively with Information Technology, system administrators, engineers, program management, physical security, and other cybersecurity personnel.

Relevant Experience Considered

Relevant experience may include a combination of:

• Cybersecurity, information assurance, information systems security, system administration, system hardening, or Information Technology.

• RMF compliance, security control implementation or assessment, continuous monitoring, or maintenance of authorization packages.

• DCSA Assessment and Authorization Guide (DAAG), NISPOM, NIST SP 800-53, DISA STIG, or comparable government cybersecurity requirements.

• Administration or security assessment of Windows, Linux, Active Directory, Group Policy, Delinea, or comparable enterprise technologies.

• Vulnerability scanning, security configuration assessment, audit log analysis, or security monitoring.

• Technical support of classified information systems, laboratories, engineering environments, or other regulated computing environments.

• Project or program management experience involving technical, cybersecurity, compliance, or information system activities.

Preferred Qualifications:

• Experience supporting DCSA-authorized classified information systems and maintaining systems through the RMF authorization and continuous monitoring lifecycle.

• Experience developing and maintaining RMF authorization artifacts within eMASS.

• Hands-on experience performing STIG, SCAP, vulnerability, and configuration compliance assessments.

• Experience with cybersecurity and monitoring tools such as Splunk, Trellix, Tenable/ACAS, SCAP, STIG Viewer, or comparable technologies.

• Experience assessing security configurations across Windows and Linux environments, including Active Directory, Group Policy, and identity or privileged-access management technologies.

• Experience supporting DCSA assessments, authorization activities, inspections, or cybersecurity readiness reviews.

• Experience analyzing cybersecurity findings, developing remediation strategies, and coordinating corrective actions with system administrators, engineers, and program personnel.

• Knowledge of cybersecurity incident response activities, including identification, preservation, containment, eradication, recovery, and reporting.

• Industry cybersecurity certifications such as CISSP, CISM, CISA, CySA+, Security+, or other certifications relevant to the assigned DoD 8140/DCWF work role.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.