Information Systems Security Officer (ISSO) I

Pyramid Systems, Inc. is hiring an Information Systems Security Officer I to support the security and compliance of information systems and networks. The role assists with system authorization, security documentation, control assessments, vulnerability management, continuous monitoring, incident reporting, and classified information protection.

What you'll do:

• Performs routine information system security tasks under the guidance of senior security personnel and established procedures
• Assists with preparing, maintaining, and updating System Security Plans, security control documentation, risk assessments, Plans of Action and Milestones, and other authorization artifacts
• Supports system authorization and continuous monitoring activities by gathering evidence, tracking documentation, and coordinating required updates
• Conducts or assists with vulnerability scans, reviews results, documents findings, and supports remediation tracking and validation
• Monitors assigned systems for compliance with approved security configurations, access requirements, and operating procedures
• Assists with reviewing proposed hardware, software, configuration, account, and network changes for security impact and required documentation
• Supports user account reviews, access authorization, security training records, audit log reviews, and other recurring security activities
• Assists with identifying, documenting, reporting, and mitigating suspected security incidents in accordance with established procedures
• Helps implement and maintain procedures for the protection, control, storage, transfer, and disposition of classified media and equipment
• Communicates security requirements and findings to technical staff, program personnel, customers, and other stakeholders in a clear and professional manner
• Maintains organized and accurate security records and provides status updates on assigned tasks, findings, and corrective actions
• Keeps current on applicable cybersecurity requirements, organizational policies, and security tools relevant to assigned systems

What they're looking for:

• Knowledge of basic cybersecurity principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management
• Working knowledge of information system security controls, authorization documentation, continuous monitoring, vulnerability management, and incident response concepts
• Familiarity with government and Department of Defense cybersecurity and classified information system requirements applicable to the assigned environment
• Basic knowledge of Windows and/or Linux operating systems, networks, user account administration, security configurations, audit logs, and common security tools
• Ability to interpret and follow security policies, technical guidance, standard operating procedures, and customer requirements
• Ability to prepare and maintain accurate security documentation, records, spreadsheets, reports, and system artifacts
• Ability to identify routine security issues, gather relevant information, apply established procedures, and escalate matters appropriately
• Ability to use vulnerability scanning, endpoint security, log review, ticketing, collaboration, and standard office productivity tools
• Ability to communicate technical and compliance information clearly in writing and verbally to technical and nontechnical audiences
• Ability to manage multiple assignments, meet deadlines, maintain attention to detail, and work effectively with moderate supervision
• Ability to protect sensitive and classified information and exercise sound judgment, discretion, and professional integrity
• Ability to work collaboratively with cross-functional teams and respond professionally to customer and stakeholder requests