Information Systems Security Officer (TS/SCI #26-173) in Arlington, Virginia at Strategic Analysis, Inc.

Strategic Analysis, Inc. is seeking experienced Information Systems Security Officer (ISSO) to provide information systems security and technical advisory support within Department of Defense (DoD) environments, including Special Access Programs (SAPs). The successful candidate will support the security and compliance of information systems, with a focus on DoD cybersecurity requirements, the Risk Management Framework (RMF), and the Authorization to Operate (ATO) process.

Responsibilities:

- Implement and maintain information systems security policies, procedures, and controls in accordance with DoD cybersecurity requirements, NIST standards, and applicable security guidance.
- Support Risk Management Framework (RMF) and Authorization to Operate (ATO) processes, including preparation of authorization packages, security assessments, and coordination with Authorizing Officials (AOs) and Security Control Assessors (SCAs).
- Develop, review, and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other required authorization artifacts.
- Conduct risk and vulnerability assessments using security tools such as ACAS, Tenable, SCAP, and STIGs, and provide recommendations for remediation and risk mitigation.
- Support continuous monitoring activities, including evaluating security controls, identifying vulnerabilities, and tracking corrective actions.
- Monitor and document security-relevant configuration changes to hardware, software, and systems to maintain compliance with approved security baselines.
- Investigate, document, and report security incidents and compliance violations, and assist in implementing appropriate corrective measures.
- Coordinate with Information Systems Security Managers (ISSMs), system administrators, government program managers, and other stakeholders to ensure security requirements are addressed throughout the system life cycle.
- Support cybersecurity training, awareness, inspections, and self-assessments to maintain compliance with applicable DoD security requirements.
- Collaborate with IT, engineering, and technical teams to integrate cybersecurity requirements into system designs, operations, and processes.
- Support security procedures for classified information systems, including media handling, sanitization, system interconnections, and Assured File Transfers (AFT), as applicable.

Experience & Requirements:

- Bachelor's degree and 5+ years of related cybersecurity or information systems security experience.
- Minimum of 3 years of experience serving as an ISSO or in a comparable information systems security role.
- Strong knowledge of DoD cybersecurity requirements, NIST standards, and the Risk Management Framework (RMF).
- Experience supporting system assessment and authorization activities, including ATO processes and security documentation.
- Familiarity with cybersecurity assessment and vulnerability management tools, including ACAS, SCAP, and STIGs.
- Experience supporting classified information systems or Special Access Programs (SAPs).
- Strong analytical, problem-solving, communication, and documentation skills.
- Active TS/SCI clearance

Certifications:
- Intermediate or Advanced 8140 Certificates, one or more of the following: Intermediate: Sec+, SSCP, GSEC, CGRC/CAP, CCSP, CCISO, CASP+ Advanced: CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCIH, GCSA, GICSP, GSLC.

Travel:
- CONUS and OCONUS travel may be required, up to 25%.