Information Systems Security Officer (ISSO), Network Security, TS/SCI
On-siteCharlottesville, Virginia, United States
Job Summary
Conduct cybersecurity compliance, risk management, and continuous monitoring for enterprise network systems in a secure DoD environment. Review and validate security configurations for Cisco routers, switches, firewalls, and related infrastructure. Support DISA STIG validation, SCAP benchmarks, and device hardening requirements using approved tools like ACAS and Tenable Nessus. Analyze vulnerability findings, document risk, and coordinate remediation with engineering teams. Develop and maintain RMF documentation including SSPs, POA&Ms, and continuous monitoring artifacts. Support ATO package development, renewal, and authorization sustainment activities while reviewing firewall rules, access control lists, and network flows. Monitor compliance through eMASS and other DoD systems, prepare security status updates for stakeholders, and support incident response by reviewing network alerts and logs. This onsite role in Charlottesville, VA requires a TS/SCI cleared ISSO with minimum four years of experience supporting cybersecurity, RMF, and secure infrastructure operations.
Required Qualifications
- Microsoft Copilot and / or an approved equivalent AI solution
- TS/SCI Clearance
- DoD 8140 (8570) IAT Level II Certification
- CCNA certification
- BS degree in Engineering, Computer Science, or related field
- Minimum 4 years of experience supporting cybersecurity, information assurance, network security, RMF, vulnerability management, or secure infrastructure operations
- Experience supporting cybersecurity activities within the DoD, Intelligence Community, or other secure enterprise environment
- Demonstrated understanding of DoD cybersecurity policy, RMF lifecycle, continuous monitoring, and authorization sustainment
- Experience developing or maintaining SSPs, POA&Ms, Continuous Monitoring documentation, control implementation details, and authorization artifacts
- Familiarity with eMASS for control tracking, package updates, risk documentation, and authorization maintenance
- Hands on experience with ACAS, Tenable Nessus, STIG Viewer, SCAP, or vulnerability management processes
- Experience reviewing, validating, or remediating vulnerability findings for network devices or supporting infrastructure
- Experience applying or validating DISA STIGs, secure configuration baselines, and hardening guidance
- Working knowledge of Cisco routers, switches, firewalls, Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms
- Working knowledge of routing, switching, VLANs, ACLs, firewall policies, ports, protocols, VPNs, IPsec, NAT, DNS, DHCP, subnetting, logging, and boundary protection
- Ability to review network diagrams, firewall rule sets, data flows, ports and protocols, and system interconnections for security and compliance impacts
- Experience coordinating with network engineers, system administrators, ISSMs, ISSEs, system owners, and mission partners to resolve security findings
- Knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, DISA STIGs, DoD cybersecurity policy, and Intelligence Community cybersecurity requirements
- Strong documentation, communication, analytical, and coordination skills
- Ability to obtain a security clearance
- U.S. citizenship
Desired Qualifications
- CCNP, CCNP Security, Cisco CyberOps, or equivalent network security certification
- CISSP, CISM, CGRC, CAP, CASP+, SecurityX, CySA+, CEH, PenTest+, or equivalent cybersecurity certification
- Experience supporting DoD or Intelligence Community network environments
- Experience securing, assessing, or documenting Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms
- Experience reviewing firewall rules, access control policies, route tables, network diagrams, ports and protocols, VPNs, boundary security, or system interconnection documentation
- Familiarity with Zero Trust principles, network segmentation, identity based access control, and modern DoD cybersecurity architecture
- Experience with Splunk, Elastic, ELK Stack, OpenSearch, SolarWinds, Wireshark, NetFlow, syslog, firewall logs, or other tools used to support monitoring and incident response
- Familiarity with network automation or scripting tools such as Ansible, Python, PowerShell, Terraform, or Cisco Catalyst Center
- Knowledge of continuous authorization, continuous monitoring, governance, risk management, and compliance sustainment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.