Information System Security Officer (ISSO)

@ Redhorse Corporation

Redhorse Corporationredhorsecorporation.com

Information System Security Officer (ISSO)

Posted 2 months ago

This job is still taking applications, but it's been up a while.

About the job

Redhorse delivers data insights and tech solutions for missions important to U.S. interests. The ISSO focuses on security, compliance, and leading cybersecurity efforts supporting the Army G-6 at Fort Belvoir, VA.

Requirements

Active Top Secret clearance
Experience with DoD/NIST security
Managing vulnerabilities and controls
Leading cybersecurity teams
Risk management and compliance

Qualifications

Bachelor’s, Master’s, or PhD in STEM
12+ years cybersecurity experience
Experience with RMF and eMASS
Deep knowledge of DoD security guidelines
Strong leadership skills

Full job description

About the Organization

Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role

Redhorse transforms the way government uses data and technology. To support this mission, we are seeking an Information Systems Security Officer II (ISSO II) to support the US Army INSCOM G6 at Fort Belvoir, VA. This is a high-impact leadership role where you will safeguard critical Army Intelligence infrastructure. You will lead a team of cybersecurity professionals to ensure mission-essential information systems maintain their Authority to Operate (ATO), directly enabling the intelligence enterprise to function securely in a complex global threat environment.

Key Responsibilities

Perform the duties of an Information System Security Officer (ISSO) as defined in AR 25-2, DA 25-2-14, and NIST SP 800-53 security controls.
Actively manage the organization’s eMASS records, including control validation and artifact association.
Assess security scan results and DISA STIGs to identify and mitigate system vulnerabilities.
Perform POA&M updates, tracking, and resolution to ensure timely remediation of security findings.
Lead continuous monitoring activities to maintain the ongoing security posture of the organization.
Manage the day-to-day activities and professional development of a team of Cybersecurity Analysts.
Collaborate with the O-ISSM on assessment and authorization (A&A) activities to ensure systems maintain an ATO on DoD/IC networks.
Maintain up-to-date status on all assigned systems and communicate risk posture to Government leadership.
Correspond with system administrators to communicate unacceptable risks and correct deficient POA&M items.
Coordinate with the Security Control Assessor (SCA) to analyze the overall risk level the system poses to enterprise networks and mission data.
Create and maintain cybersecurity policies, standards, and security testing plans aligned with Army G2 policy.
Produce actionable, risk-based reports on security assessment results and assist with vulnerability remediation.
Develop and improve risk models, metrics, and processes to stay compliant with evolving DoD and IC standards.
Provide guidance in the creation of Standard Operating Procedures (SOPs) and Tactics, Techniques, and Procedures (TTPs).

Required Experience/Clearance

Active TS security clearance with eligibility for SCI and NATO read-on prior to starting work.
Must meet DoD 8140 / 8570.01-m requirements for a privileged user (IAT II/III or IAM II/III) on a TS/SCI system.
Educational/Experience Background:
- PhD in a STEM field with at least 15 years’ experience as a cybersecurity professional; OR
- Master’s degree in a STEM field with at least 18 years’ experience as a cybersecurity professional; OR
- Bachelor’s degree in a STEM field with at least 20 years’ experience as a cybersecurity professional.
- 15+ years’ experience with assessment and accreditation (A&A) of national security systems (NSSs).
- 10+ years’ experience validating system security controls.
- 10+ years’ experience with vulnerability management and DISA STIGs/SRGs.
- 8+ years’ experience specifically with RMF and eMASS.
- 5+ years’ experience with POA&M tracking and resolution.
- 3+ years’ experience performing continuous monitoring of system security controls.

Desired Experience

10+ years’ experience as an ISSO specifically supporting Army Intelligence programs.
2+ years’ experience with AC2SP tenant assessment and accreditation activities.
Experience leading large-scale cybersecurity teams within a Department of Defense environment.

The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse's comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at Talent-Acquisition@redhorsecorp.com

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.

Show full description