Junior Information System Security Officer (ISSO) Audit-Focused
St Marys County, MD - USA
Job Summary
Location: NAS Patuxent River MD
Security Clearance Requirement: Active Top Secret
Telework Eligible No position will be 100% on-site
The Junior Information Systems Security Officer (ISSO) will provide critical cybersecurity auditing support to the OASIS team in PMA-205 by reviewing system audit records identifying and documenting security concerns and reporting findings to the Information System Security Manager (ISSM) or cybersecurity lead.
Key Responsibilities:
- Assisting with reviewing information system audit logs in accordance with established daily weekly and monthly schedules.
- Monitoring security logs for unauthorized access attempts unusual account activity privilege changes policy violations and other suspicious events.
- Documenting audit reviews using approved checklists tracking systems and reporting templates.
- Identifying and report audit discrepancies anomalies and potential security concerns to the ISSM or senior cybersecurity personnel.
- Escalating suspicious or significant events in accordance with established incident reporting procedures.
- Assisting with tracking audit findings and maintaining supporting documentation through resolution.
- Supporting periodic reviews of user accounts privileged accounts and access permissions.
- Verifying that user access aligns with approved roles and authorization records.
- Assisting with reviewing records related to account creation modification disabling and removal.
- Aiding in maintaining audit records to demonstrate compliance with organizational security requirements.
- Supporting internal and external assessments by collecting and organizing requested audit evidence.
- Assisting with preparing recurring audit reports metrics and compliance documentation.
- Following established procedures for handling classified controlled or sensitive information.
- Safeguarding audit information from unauthorized access alteration or disclosure.
- Learning and applying applicable cybersecurity policies procedures and regulatory requirements.
- Performing other audit and compliance-related duties as assigned within the scope of the position.
- This position may require up to 5% annual travel.
The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.
Education and Experience:
- Bachelors degree in Cybersecurity Information Systems Computer Science Information Technology Engineering or a related technical field highly lieu of degree 5 years experience as an IT technician on DoD classified networks is acceptable.
- This position will require DoD 8570 IAM I level compliance. Qualified candidates will have at least one of the following certifications: (Security CE/CAP/CND/Cloud/GSLC or HCISPP).
- Minimum 3 years of ISSO or cybersecurity experience with a strong desire to increase experience that is focused on system/network security auditing.
- Experience with SolarWinds Security Event Manager (SEM) ARM and related monitoring/auditing tools is preferred.
- Hands-on experience with ACAS DISA STIGs SCAP Compliance Checker and DoD information security standards.
- Familiarity with NIAP/Common Criteria DoD APL and DoD/IC cybersecurity directives.
Equally Important:
- Ability to build positive collaborative relationships across teams and with external partners.
- Effective communicator with strong verbal and written skills.
- Proactive self-directed work style with the ability to operate independently.
- Analytical thinker with proven problem-solving capabilities.
- Highly organized with the ability to balance competing priorities in a fast-paced environment.
ASEC is committed to providing access and reasonable accommodation in its services activities programs and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.
Security Clearance Requirement:
- This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Salary Range:
- The estimated salary range for this position will be $120000 - $135000 annually based on an individuals level of experience and skill set. It is our goal at ASEC to provide equitable compensation to all employees.
Who We Are:
ASEC offers meaningful work and a culture that supports your professional and personal growth. We are a 100% employee-owned business focused on providing value and innovation in the areas of engineering information technology training and logistics. We believe in doing what is right for the Warfighter plain and simple. We encourage you to explore what makes us different visit our website now!
Why work at ASEC
- 100% employee-owned. Learn more about our ESOP plan here!
- Comprehensive benefits package (11 paid holidays medical/dental/vision insurance HSA/FSA disability insurance and more!)
- 401K match
- Tuition assistance (undergraduate and graduate)
- Veteran friendly
- Thriving employee culture
- Employee discount program
We recruit employ train compensate and promote the most qualified persons for employment without regard to race color religion sex national origin ancestry age marital status sexual orientation gender identity and expression disability veteran status genetic information pregnancy or related condition (including breastfeeding) or any other status protected by law. ASEC will not discharge or in any other manner discriminate against employees or applicants because they choose to inquire about discuss or disclose their own compensation or the compensation of another employee or applicant.
Required Experience:
Junior IC
About Company
ASEC is an award-winning, employee-owned small business focused on providing value and innovation in the areas of engineering, training, flight services, and more.