Information Systems Security Officer I

Information Systems Security OfficerReflexive Concepts is seeking a skilled Information Systems Security Officer to join our team! Specifically, the Analytic Mission Integration (AMI) team is looking for an entry-level ISSO to support information security, security operations, and system authorization activities.The Work:Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologiesManage daily security operations and maintain the system's operational security postureAssess security risks and solutions, manage security settings for software, hardware, and firmware, and review the security impact of system changesPrepare, review, and maintain security documentation, including SSPs, risk assessments, C&A packages, and SRTMs, in accordance with ODNI and DoD policiesSupport system authorization under the NIST Risk Management Framework (RMF)Use Splunk to monitor security events, analyze logs, and support incident responseProvide configuration management for security-relevant software, hardware, and firmware, and maintain records on workstations, servers, routers, firewalls, and network switchesAdminister the information system's user identification and authentication mechanisms and support the ISSM in maintaining the system's IA postureQualifications:Five (5) years' experience as an ISSO on programs and contracts of similar scope, type, and complexityBachelor's degree in Computer Science or related discipline from an accredited college or university Four (4) years of additional ISSO experience may be substituted for a bachelor's degreeDoD 8570 compliance with IAT Level I or higherRequired:Experience in at least one of: current security tools, hardware/software security implementation, communication protocols, or encryption techniques/toolsExperience preparing security documentation (SSPs, risk assessments, C&A packages, SRTMs)Familiarity with the NIST Risk Management Framework (RMF)Desired:Splunk for security event monitoring, log analysis, and incident response