Information Systems Security Officer (ISSO), Network Security, TS/SCI

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution. Description Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI cleared Information System Security Officer (ISSO), Network Security to support enterprise network systems in a secure DoD environment.

The Network ISSO will support cybersecurity compliance, Risk Management Framework (RMF), vulnerability management, DISA STIG validation, continuous monitoring, and authorization sustainment for Cisco based network infrastructure. The Network ISSO will work closely with network engineers, cybersecurity staff, ISSMs, ISSEs, system owners, and mission partners to ensure network systems remain secure, compliant, documented, and operationally effective. This role is suited for a technical ISSO with experience in RMF, ACAS, eMASS, POA Ms, firewall rule reviews, ports and protocols, vulnerability remediation, and secure network operations.

This position is onsite in Charlottesville, VA.

Responsibilities

Support cybersecurity compliance, risk management, and continuous monitoring for enterprise network systems. Review and validate security configurations for Cisco routers, switches, firewalls, and related network infrastructure.

Requirements

Conduct, review, and validate vulnerability scans using ACAS, Tenable Nessus, STIG Viewer, and other approved DoD tools. Analyze vulnerability findings, identify false positives, document risk, and coordinate remediation with network engineering teams. Develop and maintain RMF documentation including SSPs, POA Ms, Continuous Monitoring artifacts, hardware and software inventories, network diagrams, and control implementation details.

Support ATO package development, renewal, extension, audit readiness, and authorization sustainment activities. Review firewall rules, access control lists, ports, protocols, services, VPN connections, network flows, and boundary protection controls. Support change control reviews by assessing network changes for cybersecurity, RMF, documentation, and compliance impacts.

Monitor compliance through eMASS, ACAS, STIG Viewer, vulnerability management tools, and other approved DoD systems. Support incident response activities by reviewing network related alerts, logs, firewall events, syslog data, authentication events, and corrective actions. Prepare security status updates, vulnerability summaries, POA M updates, compliance reports, and risk briefings for stakeholders and leadership.

Required Education, Certifications and Security Clearance BS degree in Engineering, Computer Science, or related field Experience may be substituted for degree.

Experience/

Qualifications

Minimum 4 years of experience supporting cybersecurity, information assurance, network security, RMF, vulnerability management, or secure infrastructure operations. Experience supporting cybersecurity activities within the DoD, Intelligence Community, or other secure enterprise environment. Demonstrated understanding of DoD cybersecurity policy, RMF lifecycle, continuous monitoring, and authorization sustainment.

Experience developing or maintaining SSPs, POA Ms, Continuous Monitoring documentation, control implementation details, and authorization artifacts. Familiarity with eMASS for control tracking, package updates, risk documentation, and authorization maintenance. Hands on experience with ACAS, Tenable Nessus, STIG Viewer, SCAP, or vulnerability management processes.

Experience reviewing, validating, or remediating vulnerability findings for network devices or supporting infrastructure. Experience applying or validating DISA STIGs, secure configuration baselines, and hardening guidance.