Information Systems Security Officer, Staff
- Compensation
- Not disclosed
- Location
- Middletown, RI, US
- Work setup
- Not specified
- Seniority
- Staff
- Employment
- Contract
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 2-4 years of experience in related field.
- Secret clearance.
- Advanced cybersecurity certifications such as CISSP, CASP+, or CISM are a plus.
- CSWF certification preferred.
- Experience supporting DoW or federal information assurance programs, including Authorization to Operate (ATO) package support.
- Familiarity with security scanning, compliance validation, system hardening, and audit support.
- Experience supporting incident response, vulnerability management, and continuous monitoring activities.
Nice to have
- Knowledge of risk management and security control assessment methodologies.
- Evaluate products and support various aspects of system administration from a security perspective.
- Experience with security tools, vulnerability scanning platforms, and compliance reporting.
- Understanding of security architecture principles and secure system configuration practices.
- Ability to effectively use JIRA and Confluence to document security activities, track findings and remediation actions, manage workflow, and coordinate with developers, program managers, and other sta
- Ability to manage multiple priorities and support deadlines in a regulated environment.
- Strong analytical, documentation, and problem-solving skills.
Full description
Overview
AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training.
We are seeking an Information System Security Officer (ISSO) to provide technical and programmatic Information Assurance support for customers in support of network and information security systems. This role is responsible for independently executing day-to-day information assurance and cybersecurity compliance activities for assigned systems, including security documentation, vulnerability assessment support, audit readiness, and implementation of security requirements.
The ISSO will support certification and accreditation efforts, conduct security assessments, develop required security documentation, evaluate compliance with applicable laws and regulations, and recommend improvements to strengthen the organization’s cybersecurity posture. The ideal candidate will be a strong communicator who can effectively partner with technical and program stakeholders, facilitate discussions, and support coordination across the security lifecycle.
Responsibilities
- Supports and implements security requirements within the organization’s business processes and system environments.
- Prepare security documentation using accepted frameworks and guidelines, including RMF, Xacta, and related accreditation processes.
- Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress, and to drive alignment and timely resolution of identified issues.
- Develop and maintain Security Test and Evaluation (ST&E) plans, ensuring the implementation of Security Technical Implementation Guides (STIGs), and Plan of Action and Milestones (POA&Ms).
- Provide certification and accreditation support, including developing, updating and maintaining security plans (SPs) and contingency plans.
- Conduct complex risk assessments and vulnerability assessments and recommend mitigation strategies.
- Analyze policies, procedures, and system implementations against applicable federal laws, regulations, and security standards; identify gaps and recommend corrective actions.
- Recommend system enhancements and corrective actions to address security deficiencies.
- Oversee secure configuration practices, guides implementation and validation of security tools, reviews compliance scan results, advise stakeholders on remediation priorities, and evaluates products and administrative practices for security impact and enterprise suitability