View all jobs

Information Systems Security Officer I

  • Annapolis Junction, MD
Reflexive Concepts is seeking a skilled Information Systems Security Officer to join our team! 

Specifically, the Analytic Mission Integration (AMI) team is looking for an entry-level ISSO to support information security, security operations, and system authorization activities.

The Work:
  • Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies
  • Manage daily security operations and maintain the system’s operational security posture
  • Assess security risks and solutions, manage security settings for software, hardware, and firmware, and review the security impact of system changes
  • Prepare, review, and maintain security documentation, including SSPs, risk assessments, C&A packages, and SRTMs, in accordance with ODNI and DoD policies
  • Support system authorization under the NIST Risk Management Framework (RMF)
  • Use Splunk to monitor security events, analyze logs, and support incident response
  • Provide configuration management for security-relevant software, hardware, and firmware, and maintain records on workstations, servers, routers, firewalls, and network switches
  • Administer the information system’s user identification and authentication mechanisms and support the ISSM in maintaining the system’s IA posture
Qualifications:
  • Five (5) years’ experience as an ISSO on programs and contracts of similar scope, type, and complexity
  • Bachelor’s degree in Computer Science or related discipline from an accredited college or university
    • Four (4) years of additional ISSO experience may be substituted for a bachelor’s degree
  • DoD 8570 compliance with IAT Level I or higher
Required:
  • Experience in at least one of: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/tools
  • Experience preparing security documentation (SSPs, risk assessments, C&A packages, SRTMs)
  • Familiarity with the NIST Risk Management Framework (RMF)
Desired:
  • Splunk for security event monitoring, log analysis, and incident response