Information Systems Security Officer I

Reflexive Concepts is seeking a skilled Information Systems Security Officer to join our team!

Specifically, the Analytic Mission Integration (AMI) team is looking for an entry-level ISSO to support information security, security operations, and system authorization activities.

The Work:

- Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies

- Manage daily security operations and maintain the systems operational security posture

- Assess security risks and solutions, manage security settings for software, hardware, and firmware, and review the security impact of system changes

- Prepare, review, and maintain security documentation, including SSPs, risk assessments, C&A packages, and SRTMs, in accordance with ODNI and DoD policies

- Support system authorization under the NIST Risk Management Framework (RMF)

- Use Splunk to monitor security events, analyze logs, and support incident response

- Provide configuration management for security-relevant software, hardware, and firmware, and maintain records on workstations, servers, routers, firewalls, and network switches

- Administer the information systems user identification and authentication mechanisms and support the ISSM in maintaining the systems IA posture

Qualifications:

- Five (5) years experience as an ISSO on programs and contracts of similar scope, type, and complexity

- Bachelors degree in Computer Science or related discipline from an accredited college or university

Four (4) years of additional ISSO experience may be substituted for a bachelors degree

- DoD 8570 compliance with IAT Level I or higher

Required:

- Experience in at least one of: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools

- Experience preparing security documentation (SSPs, risk assessments, C&A packages, SRTMs)

- Familiarity with the NIST Risk Management Framework (RMF)

Desired:

- Splunk for security event monitoring, log analysis, and incident response