Junior Information System Security Officer (ISSO) - Audit-Focused

Description

Location: NAS Patuxent River, MD

Security Clearance Requirement: Active Top Secret

Telework Eligible? No, position will be 100% on-site

The Junior Information Systems Security Officer (ISSO) will provide critical cybersecurity auditing support to the OASIS team in PMA-205 by reviewing system audit records, identifying and documenting security concerns, and reporting findings to the Information System Security Manager (ISSM) or cybersecurity lead.

Key Responsibilities:

• Assisting with reviewing information system audit logs in accordance with established daily, weekly, and monthly schedules.
• Monitoring security logs for unauthorized access attempts, unusual account activity, privilege changes, policy violations, and other suspicious events.
• Documenting audit reviews using approved checklists, tracking systems, and reporting templates.
• Identifying and report audit discrepancies, anomalies, and potential security concerns to the ISSM or senior cybersecurity personnel.
• Escalating suspicious or significant events in accordance with established incident reporting procedures.
• Assisting with tracking audit findings and maintaining supporting documentation through resolution.
• Supporting periodic reviews of user accounts, privileged accounts, and access permissions.
• Verifying that user access aligns with approved roles and authorization records.
• Assisting with reviewing records related to account creation, modification, disabling, and removal.
• Aiding in maintaining audit records to demonstrate compliance with organizational security requirements.
• Supporting internal and external assessments by collecting and organizing requested audit evidence.
• Assisting with preparing recurring audit reports, metrics, and compliance documentation.
• Following established procedures for handling classified, controlled, or sensitive information.
• Safeguarding audit information from unauthorized access, alteration, or disclosure.
• Learning and applying applicable cybersecurity policies, procedures, and regulatory requirements.
• Performing other audit and compliance-related duties as assigned within the scope of the position.
• This position may require up to 5% annual travel.

The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.

Requirements

Education and Experience:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field highly desired. In lieu of degree, 5 years' experience as an IT technician on DoD classified networks is acceptable.
• Minimum 3 years of ISSO or cybersecurity experience, with a strong desire to increase experience that is focused on system/network security auditing.
• Experience with SolarWinds Security Event Manager (SEM), ARM, and related monitoring/auditing tools is preferred.
• Hands-on experience with ACAS, DISA STIGs, SCAP Compliance Checker, and DoD information security standards.
• Familiarity with NIAP/Common Criteria, DoD APL, and DoD/IC cybersecurity directives.

Equally Important:

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self-directed work style with the ability to operate independently.
• Analytical thinker with proven problem-solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast-paced environment.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

Security Clearance Requirement:

• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Salary Range:

• The estimated salary range for this position will be $120,000 - $135,000 annually, based on an individual's level of experience and skill set. It is our goal at ASEC to provide equitable compensation to all employees.

Who We Are:

ASEC offers meaningful work and a culture that supports your professional and personal growth. We are a 100% employee-owned business focused on providing value and innovation in the areas of engineering, information technology, training, and logistics. We believe in doing what is right for the Warfighter, plain and simple. We encourage you to explore what makes us different, visit our website now!

Why work at ASEC?

• 100% employee-owned. Learn more about our ESOP plan here!
• Comprehensive benefits package (11 paid holidays, medical/dental/vision insurance, HSA/FSA, disability insurance, and more!)
• 401K match
• Tuition assistance (undergraduate and graduate)
• Veteran friendly
• Thriving employee culture
• Employee discount program

We recruit, employ, train, compensate, and promote the most qualified persons for employment without regard to race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, genetic information, pregnancy or related condition (including breastfeeding), or any other status protected by law. ASEC will not discharge or in any other manner discriminate against employees or applicants because they choose to inquire about, discuss, or disclose their own compensation or the compensation of another employee or applicant.