Description

ActioNet is hiring for an Information Systems Security Officer (ISSO) in Falls Church, VA. This position requires a Secret clearance.

Primary Responsibilities:
• Serve as the ISSO for HQ, ensuring compliance with DoD cybersecurity policies and standards.
• Execute and support Risk Management Framework (RMF) ATO lifecycle activities for  LAN/WAN and Med-COI networks.
• Monitor and enforce security policies, directives, and task orders, ensuring compliance with FISMA, DoDI 8500/8510, and SECNAV M-5239.1.
• Administer, review, and report on security configuration, vulnerability assessments, and compliance of systems.
• Operate and oversee Cybersecurity Service Provider (CSSP) tools including ACAS, Nessus, HBSS, Trellix, and Microsoft Endpoint Configuration Manager.
• Identify, classify, prioritize, remediate, and report vulnerabilities in accordance with the Information Assurance Vulnerability Management (IAVM) program.
• Support IG inspections and cybersecurity-related audits, providing documentation and evidence of compliance.
• Collaborate with system administrators, developers, and project managers to ensure security controls are implemented in all IT projects.
• Prepare and maintain security documentation including Security Risk Assessments, POA&Ms, and ATO packages.
• Provide security training, awareness, and guidance to staff and end-users.

Required Job Experience:
• 5–7 years of professional cybersecurity or ISSO experience supporting enterprise or DoD IT systems.
• Proven experience with RMF processes, ATO packages, and vulnerability management.
• Hands-on experience with cybersecurity tools such as ACAS, Nessus, HBSS, Trellix, and MECM/SCCM.
• Familiarity with DoD  cybersecurity directives, FISMA compliance, and IAVM processes.
• Strong documentation, reporting, and collaboration skills across multidisciplinary IT teams.

Degree (Required or certifications below can be substituted in lieu of):
• Bachelor’s Degree in Cybersecurity, Information Technology, or related field.

Certification (Preferred one of the following in lieu of Required Degree):
• DoD 8570.01-M IAM Level II or III certification (e.g., CAP, CISSP, CISM).
• DoD 8570.01-M IAT Level II certification (e.g., Security+).
• Certified Ethical Hacker (CEH) or equivalent.