Information System Security Officer

AM Pierce & Associates is seeking an Information System Security Officer to join a team supporting cyber security operations in St. Inigoes, MD. Work is performed on-site. Employees will be required to travel 10% of the time. This is a non-management position.

Responsibilities

Assists in providing detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities; Uses Computer Network Defense (CND) tools for continual monitoring and vulnerability testing and analysis of system activity to identify malicious activity; Assists with performing security events and incident correlation using information gathered from a variety of sources; Collect, prepare, and submit artifacts supporting eMASS ATO packages, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and supporting evidence for control implementation; Verify system and network configurations against NIST 800-53 control requirements, identifying and documenting gaps or non-conformance; Manage the Plan of Action and Milestones (POA&M) for assigned systems, including tracking open findings, coordinating remediation with system owners and engineers, and closing items with appropriate evidence; Coordinate with ISSEs, system administrators, and engineering teams to gather technical evidence and validate control implementation; Support continuous monitoring activities, including periodic control reviews, vulnerability scan result analysis, and reassessment of control effectiveness; Track authorization expiration dates and lead re-authorization/renewal efforts to maintain continuous ATO status; Maintain accurate, audit-ready documentation in eMASS for assigned systems and support external audits or assessor requests; Review vulnerability and compliance scan results (e.g., ACAS/Nessus, SCAP) and correlate findings to relevant 800-53 controls and POA&M items; Support incident reporting and documentation requirements in accordance with applicable DoD and program policies; Communicate risk posture and compliance status to program management and Authorizing Officials (AOs) as required

Requirements

Bachelor's degree in computer science, or a related field or equivalent experience; A minimum of 2 years of experience in systems security; Able to communicate effectively and clearly present technical approaches and findings; Active DoW Secret security clearance required (TS/SCI eligible); US citizenship required; Bachelor's degree in information technology, Cybersecurity, or a related field, or equivalent professional experience; 2+ years of experience in an ISSO, ISSM, or compliance-focused cybersecurity role within DoD or federal environments; Working knowledge of the Risk Management Framework (RMF) and NIST 800-53 security controls; Hands-on experience preparing and submitting artifacts in eMASS; Demonstrated experience managing POA&Ms, including tracking, coordinating remediation, and documenting closure of findings; Familiarity with vulnerability and compliance scanning tools (e.g., ACAS/Nessus, SCAP) and interpreting results against control requirements; DoD 8570/8140-compliant certification at IAM/IAT Level II or higher (e.g., Security+, CAP, CySA+)

Nice to have

CAP, CASP, CISSP, or CISM certification; Experience supporting both classified and unclassified system authorizations; Experience with continuous monitoring/ConMon programs and periodic reassessment cycles; Familiarity with STIG-based hardening and correlating hardening evidence to control families; Experience supporting multiple concurrent ATO packages across varying system types; Advanced degree preferred

Benefits

Medical, Dental and Vision Insurance; Life and Accidental Death & Disability Coverage; Traditional 401(k) and ROTH 401k Retirement Plans; Paid Time Off and Holidays; Professional Development Opportunities; Incentive Programs, Awards and Recognition; Employee Assistance Program; Will Preparation; Identity Theft Protection & Legal Support; Referral Program; Voluntary Accident, Critical Illness, and Hospital Indemnity Coverage; Pet Insurance; Norton Life Lock; HSA and FSA plans