ISSO with Security Clearance - San Antonio

Job summary

Cybersecurity ISSO Analyst supports our Army customer by providing a critical cybersecurity role by ensuring continuous monitoring in accordance with DoD Risk Management Framework (RMF), and through system monitoring and analysis support for the detection of cyber incidents and provides recommendations on how to correct findings.

Responsibilities

• Supports our Army customer by providing a critical cybersecurity role by ensuring continuous monitoring in accordance with DoD Risk Management Framework (RMF), and through system monitoring and analysis support for the detection of cyber incidents and provides recommendations on how to correct findings.
• Performs tasks in a variety of areas to include: Serve as the ISSO in support of the ISO for assigned systems, ensuring full compliance with RMF, DoDI , and NIST SP security control baselines.
• Manage and maintain all RMF-related documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms).
• Conduct security control assessments and facilitate ongoing authorization (ATO/ATC) activities.
• Lead vulnerability and compliance assessments using automated tools (e.g., ACAS, STIG Viewer) and ensure all findings are remediated or tracked via POA&Ms.
• Monitoring security logs, analyzing and reporting cyber incidents, reviewing Common Vulnerabilities and Exposures (CVEs), and implementing directives from NETCOM (e.g., Cyber Tasking Orders - CTO).
• Work is performed on-site with occasional on-call duties for critical incidents in a collaborative, demanding environment requiring attention to emerging threats and vulnerabilities.
• Monitor and analyze security events and alerts generated by SIEM platforms, firewalls, IDS/IPS, and endpoint detection tools to identify potential threats and anomalous behavior.
• Submits and tracks all service tickets submitted internally and externally for Operational Technology (OT) systems.
• Analyze potential security incidents and investigate to determine the scope, impact, and root cause, and recommend effective remediation strategies, based on SIEM data analysis, in accordance with SLAs and OLAs.
• Conduct research on the latest organization's environment threat vectors, attack methodologies, and adversarial tactics, techniques, and procedures (TTPs).
• Support the configuration, tuning, and optimization of security monitoring tools, including SIEM and threat detection platforms.
• Generate detailed and actionable reports for leadership from SIEM platforms summarizing identified threats, incidents, and remediation steps.

Job description