Information Systems Security Officer (ISSO), Master

Develop and integrate cybersecurity architectures for systems processing multiple classification levels while performing senior-level ISSO and ISSE duties throughout the system development, authorization, and continuous monitoring life cycles. Apply JSIG, RMF, and NIST SP 800-series requirements to system design, control implementation, assessment, and authorization. Manually develop and maintain authorization artifacts and bodies of evidence, including SSPs, control narratives, POA&Ms, inventories, diagrams, and assessment evidence. Evaluate security architectures and system changes for impacts to security controls, authorization boundaries, and risk posture. Perform hands-on security assessments using command-line audits, compliance scans, configuration analysis, log reviews, and control validation. Identify security gaps and develop actionable risk management, remediation, and POA&M plans. Determine protection needs and coordinate the allocation of system-specific, hybrid, and common controls. Implement secure configuration processes and assess compliance with STIGs and Security Requirements Guides. Use Tenable, Trellix, SolarWinds, SIEM, SCAP, OpenSCAP, and Evaluate-STIG to assess vulnerabilities, configurations, and controls. Review system diagrams, data flows, inventories, interconnections, and configurations for accuracy and security compliance. Coordinate with program security, authorization officials, assessors, system owners, engineers, and administrators. Provide technical leadership for complex SAP cybersecurity, incident response, remediation, and authorization activities.