NextGen Federal Systems is looking to hire an ISSO to support our efforts with US Customs and Border Protection's Office of Acquisition in Washington, DC.
The ISSO will support CBP customers by ensuring system compliance with federal cybersecurity policies, guidelines, and frameworks. The ISSO will work closely with system owners, security engineers, and program management to maintain system accreditation, enforce security best practices, and mitigate cybersecurity risks.
Key Responsibilities
Ensure compliance with DHS policies, Federal Information Security Modernization Act (FISMA), National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and other applicable security requirements. Develop and maintain Security Authorization Packages (SAP) under Risk Management Framework (RMF), including System Security Plans (SSP), Security Assessment Reports (SAR), and Plan of Action & Milestones (POA&M). Perform Continuous Monitoring (ConMon) activities, including vulnerability assessments, security audits, and system reviews. Monitor and report security incidents, ensuring compliance with DHS reporting guidelines and procedures.
Conduct security impact assessments for new systems, applications, and technology integrations. Review and validate system configurations against Security Technical Implementation Guides (STIGs) and DHS Security Policies. Support Authorization to Operate (ATO) and system accreditation activities, working with DHS Cybersecurity Division (CISA) and other stakeholders. Assist with penetration testing, vulnerability scanning, and remediation of identified weaknesses.
Stay current on emerging cybersecurity threats, technologies, and best practices relevant to DHS systems.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
- 10 years of experience with background in cybersecurity, risk management, or IT security roles
- Ability to obtain and retain a CBP Background Investigation
- One of the following certifications: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), Security+ (CompTIA Security+), and/or CEH (Certified Ethical Hacker) or equivalent
- Experience with NIST RMF, DHS Information Security Program, DHS 4300A/B, and Federal IT security frameworks
- Hands-on experience with security tools (e.g., Nessus, Splunk, ACAS, HBSS, SIEM solutions)
- Understanding of network security, cloud security (AWS, Azure, or Google Cloud), and endpoint protection
Desired Qualifications
- Active DHS Suitability, CBP Background Investigation and/or Top Secret Clearance
- Experience supporting DHS or other Federal Government cybersecurity programs
- Familiarity with DevSecOps, automation tools, and secure coding practices
- Experience conducting security control assessments and audits
About NextGen: NextGen Federal Systems is an innovative technology and professional services provider specializing in advanced software solutions and comprehensive mission and business support services. We work in close collaboration with our Customers to truly understand their business and mission goals. Our approach is to design, build, implement, and manage solutions that measurably improve our client’s organizational performance. We have established and foster a corporate culture where we: Treat employees with fairness and respect regardless of their position, sexual identity, race, or tenure; Communicate the importance of our mission and our employees’ contributions to it, ensuring they understand how their job role contributes to the greater good; Openly promote and communicate our ideas for change and adaptability; Strive to achieve results as an organization; Hold employees accountable to their commitments and provide incentives that encourage positive and productive behaviors; Value the talents and contributions of our employees as the key factor for our success; Create an environment where people can engage at all levels; Encourage people to take risks and allow them to make mistakes.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.
RefID: B01x
