Information System Security Officer (ISSO) with DevSecOps Expertise
Location: Naval Base Point Mugu, near Camarillo, CA
Salary Range: $100,000 - $140,000 annually
Clearance Required: T5/Secret Security Clearance (must be eligible for Top Secret)
Citizenship: U.S. Citizenship required
Position Overview
We are seeking an experienced Information System Security Officer (ISSO) with a strong background in DevSecOps to join our team supporting Department of Defense (DoD) programs. This role is ideal for a cybersecurity professional who excels in integrating security practices into the software development lifecycle, ensuring robust protection of critical information systems.
As an ISSO, you will be responsible for implementing and maintaining security measures, managing risk, and ensuring compliance with DoD security directives. You will work closely with cross-functional teams to embed security into CI/CD pipelines, enabling secure and efficient software deployments. This position offers excellent opportunities for career growth, a competitive salary, and comprehensive benefits within a stable and employee-focused company.
Key Responsibilities
- Information Assurance:
- Develop, implement, and manage security measures to protect computer networks and information systems.
- Conduct risk assessments, identify vulnerabilities, and implement mitigation strategies.
- Ensure that security controls are in place to protect digital files and electronic infrastructure.
- Respond to security incidents, including breaches and malware infections, in collaboration with cybersecurity leads.
- DevSecOps Integration:
- Embed security practices into CI/CD pipelines to minimize software vulnerabilities.
- Collaborate with development and operations teams to ensure shared responsibility for security.
- Implement automated security checks at each stage of the software delivery process.
- Support the continuous integration, delivery, and deployment of secure software.
- Compliance & Risk Management:
- Manage the Risk Management Framework (RMF) process, ensuring compliance with DoD standards and directives.
- Maintain system accreditation and documentation in accordance with applicable regulations.
- Lead efforts to enhance security protocols and ensure the confidentiality, integrity, and availability (CIA) of sensitive data.
Qualifications
- Experience:
- 3+ years of experience in cybersecurity, with a focus on secure network/system design, analysis, and implementation.
- Practical experience in DevSecOps, CI/CD, and security automation.
- Experience with DoD security requirements and the Risk Management Framework (RMF).
- Certifications:
- CompTIA Security+ (required).
- CISSP or NSA equivalent (preferred).
- IAM Level 2 certification as per DoD Directive 8570.01.
- Technical Skills:
- Strong proficiency with Linux systems.
- In-depth knowledge of cybersecurity tools, standards, and protocols.
- Proficiency in Microsoft Office Suite (Word, Excel, Access, PowerPoint).
- Soft Skills:
- Excellent communication and interpersonal skills, with the ability to collaborate effectively across teams.
- Strong analytical and problem-solving abilities.
- Ability to work independently and take initiative in a fast-paced environment.
Education
- Required: Bachelor’s degree in Computer Science, Information Technology, or a related technical discipline.
- Allowable Substitution: An additional 6 years of relevant experience may substitute for a Bachelor’s degree, or 4 additional years with an Associate’s degree.
Benefits
- Competitive salary range based on experience, qualifications, and geographic location.
- Comprehensive benefits package including health insurance, retirement plans, and paid time off.
- Opportunities for professional development and career advancement within a stable and supportive work environment.
Note: This position requires an active T5/Secret Security Clearance and eligibility for a Top Secret Security Clearance. Applicants will be subject to a security investigation to determine eligibility for access to classified information.