Information Systems Security Officer

Information System Security Officer (ISSO)

Dynetics, a wholly owned subsidiary of Leidos, is seeking a talented Information System Security Officer (ISSO) to join a diverse team to create unique solutions for complex problems. With offices across the United States engaging in the defense, space, cyber and commercial fields, Dynetics provides responsive, cost-effective engineering, scientific and IT solutions.

The Information System Security Officer (ISSO) will be responsible for supporting our Classified Information System Cybersecurity/Information Assurance Program. The Junior ISSO will report to the Information System Security Manager (ISSM) on all aspects of classified information system security compliance.

Primary Responsibilities

• Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness
• Investigating information system security violations and help prepare reports specifying corrective and preventative actions
• Support the creation, review and update of cybersecurity documentation and other technical writing
• Support the auditing of information systems to ensure compliance with security policies and procedures while reporting any discrepancies to the ISSM, ISO or FSO.
• Assisting in the Risk Management Framework (RMF) authorization process by developing and maintaining artifacts for the IS Body of Evidence (BoE).
• Reviewing Configuration Management (CM) requests of all associated hardware, software, and security relevant functions are maintained and documented as part of CCB approval process.
• Sanitization and release of hardware in accordance with security policies or Authorizing Official (AO) guidance.
• Testing, evaluating and application of required technical security controls and periodic inspections of information systems.

Basic Qualifications

• DoD 8140/DoD Cyber Workforce Framework (DCWF) work role (for example, CompTIA Security+, CySA+, CISSP, CISM or equivalent), or the ability to otherwise satisfy DoD 8140 qualification requirements through approved education, training, or experience.
• Position Typically requires at least 1-3 years of applicable, related experience in computer-related discipline

Relevant Experience Considered:

• Cybersecurity, systems security or hardening, Information Technology
• Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Guide (DAAG), National Industrial Security Program Operating Manual (NISPOM)
• Experience working with and/or supporting computer technologies (such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)
• Some understanding of security configurations across multiple operating systems in various environments, including Windows, Linux, utilizing Active Directory/Group Policy, Delinea, etc. is required.
• Candidate must be highly organized, self-motivated with excellent documentation and time management skills and
• Must possess the ability to communicate well with others and work with minimal supervision.

Preferred Qualifications:

• Some Experience with IT (Windows, Linux) and/or security related certifications (e.g., ISC2 Certified in Cybersecurity (CCC)certification, CompTIA CySA+ certification, GIAC Certified Incident Handler (GCIH) certification)
• Experience working in DoD classified operating and/or laboratory environments
• Some Experience with various information system security tools that address vulnerability analysis and mitigation. These may include SPLUNK, SolarWinds, Trellix, Tenable, and SCAP.
• Familiarity with implementation of Government directives and policies derived from NIST, STIG, DoD, or other Government Regulatory compliance standards within a professional industry
• Familiarity in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF), eMASS
• Ability to support technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT) with Team support
• Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication
• Proficiency in interpreting logs from command line results and SIEM tools (e.g., Splunk, SolarWinds, and Command Line)

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.