Information Systems Security Officer

An information system security officer on Two Six Technologies' corporate information security team, working on site daily in Arlington, Virginia with occasional trips to Herndon, and helping the ISSM keep classified programmes compliant. The ISSO scopes requirements and builds ATO packages with the ISSM and project managers, completes STIG checklists and tracks POA&Ms, drafts RMF packages in eMASS or Xacta, reviews logs and data transfers for anomalous activity, helps remediate incidents, runs regular audits and continuous monitoring, supports self-inspections and the insider threat programme, and tracks system changes.

It asks for three years in classified environments as an ISSO, network engineer or security analyst, an understanding of all seven RMF steps, a DoD 8140 certification within six months and an active Top Secret with SCI eligibility.