Information System Security Officer - Topsecret

Job Description:

We are seeking an experienced Information System Security Officer to support a Defense Counterintelligence and Security Agency Portfolio Acquisition Executive managed service provider contract. This mid-level role requires a highly autonomous, TOP SECRET-cleared cybersecurity professional who will serve as the cybersecurity point of contact and ISSO/ISSE for key information systems within cleared environments.  

You will help protect systems supporting national security programs and own the security posture of assigned systems throughout the system lifecycle—from design and authorization through continuous monitoring and ongoing operations. You will ensure systems remain compliant, monitored, appropriately documented, and prepared for security assessments and authorization activities.  

You will drive Risk Management Framework activities from end to end, validate system security requirements, develop and assess security control implementations, design continuous monitoring strategies, and manage vulnerabilities from identification through remediation. You will document and track findings through Plans of Action and Milestones and support the preparation and maintenance of authorization artifacts, including System Security Plans and Security Assessment Reports.  

This role requires between 50% and 100% on-site support in Herndon, Virginia, or Hanover, Maryland, including work in Sensitive Compartmented Information Facility environments as mission priorities require. 

• →Drive Risk Management Framework (RMF) activities for assigned information systems 

• →Design and implement system continuous monitoring plans 

• →Perform vulnerability management, drive remediation with system stakeholders, and manage Plans of Action and Milestones (POA&Ms) 

• →Serve as the key point of contact for system reporting and communications to the ISO, ISSM, and customer leadership, as applicable, delivering excellent customer support 

• →Work proactively across multiple systems and competing priorities 

• →Collaborate and adapt to support the success of the broader team and the Mission.  

• →Collaborate with stakeholders to identify challenges and implement solutions 

• Active TOP SECRET security clearance.  

• U.S. citizenship and continued eligibility to maintain the required security clearance.  

• Bachelor’s degree in cybersecurity, information assurance, information systems engineering, computer science, or a related field; equivalent professional experience may be accepted in lieu of a degree.
• At least 5+ years of relevant cybersecurity, information assurance, systems security engineering, or information technology experience. 
• Eligibility for enrollment in the DCSA Personnel Assurance Program.  

• Current DoD 8570/8140 Information Assurance Technical Level II certification, such as CompTIA Security+, SSCP, GSEC, or another qualifying certification.  

• Demonstrated ability to work independently, interact directly with customers and technical stakeholders, and serve as an escalation point for cybersecurity and compliance issues.  

• Experience owning cybersecurity, RMF, and compliance activities for DoD or other federal government information systems in an ISSO capacity.  

• Experience designing, architecting, validating, or implementing security controls for DoD or federal government information systems in an ISSE capacity.  

• Direct experience developing, reviewing, or maintaining RMF assessment and authorization documentation, including:   

• Experience with System Security Plans, Security Assessment Reports, Security control implementation statements, Continuous monitoring plans, Risk assessments, Plans of Action and Milestones  and Authorization decision support packages .

• Working knowledge of the NIST Risk Management Framework, including NIST SP 800-37 and NIST SP 800-53.  

• Experience supporting vulnerability management, remediation planning, risk acceptance, and POA&M management.  

• EPrior experience serving as an ISSO or ISSE in a DoD or DCSA environment.  

• Experience supporting Tier 3 system RMF activities for federal cloud-based systems.  

• Working knowledge of Amazon Web Services and Microsoft Azure Government environments, including cloud security architecture, planning, design, and operations.  

• Experience securing systems hosted in classified, government, or hybrid cloud environments.  

• Experience with eMASS or a comparable governance, risk, and compliance platform.  

• Familiarity with systems security engineering documentation, such as: Cybersecurity strategies, Program Protection Plans, Information Support Plans, Security architecture and engineering documentation.  
• Experience with security information and event management platforms, particularly Splunk Enterprise Security.  

• Familiarity with security orchestration, automation, and response platforms, including Splunk SOAR.  

• Experience supporting security monitoring, incident response, or Security Operations Center operations.  

• Experience developing or validating security monitoring and incident-detection use cases.  

• Knowledge of network security, system security, security logging, and event-monitoring requirements.  

• Experience engineering or assessing cross-domain solutions, system interconnections, or trusted relationships between external systems.  

• DoD 8570/8140 IAT Level III or an equivalent advanced certification.  

• Professional cybersecurity certification, such as CISSP, CASP+, CISM, or equivalent.  

• AWS or Microsoft Azure certification, such as AWS Certified Solutions Architect, AWS Certified Security, Azure Solutions Architect Expert, or Azure Security Engineer Associate.  

• Splunk certifications or accreditation in Splunk Enterprise Security, IT Service Intelligence, User Behavior Analytics, SOAR, or Splunk Cloud. 

Security Clearance Requirement:

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.