Information System Security Officer

ENSCO, Inc.
Colorado Springs, CO
On-site

Who this role is best for

U.S. citizens with cybersecurity certifications and RMF experience will find this on-site role with the U.S. Space Force a natural fit.

Best fit for

  • Candidates with a background in vulnerability management and audit tools
    — “Experience with vulnerability management and audit collection tools”
  • Professionals who can manage security artifacts and lead government security reviews
    — “Demonstrable experience maintaining system security artifacts in support of the RMF and A&A process. Experience preparing for and participating in government security reviews and on-site validation activities.”

Things to consider

  • Must be prepared to obtain a Top Secret clearance with SCI eligibility within six months.
    — “Ability to obtain and maintain a Top Secret clearance with SCI eligibility.”
  • REAL ID-compliant identification will be necessary for accessing federal facilities.
    — “REAL ID Requirement”

How to stand out

  • Highlight experience with RMF and A&A processes in your resume and interview responses.
    — “development of implementation plans and procedures to meet NISPOM, DAAG, and ICD requirements in support of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process”
  • Emphasize your ability to conduct continuous monitoring and manage security audits.
    — “Conduct continuous monitoring activities on assigned information system per the approved security plan.”
  • Showcase your communication skills with executive staff and government stakeholders.
    — “Effective verbal and written communication skills with the ability to offer experienced guidance to executive staff, customers, and subcontractors.”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Achieved authorization to operate (ATO) for assigned information systems
  • Ensured compliance with USG cybersecurity requirements
  • Provided initial and recurring general and privileged user training
Typical background
Bachelor’s degree in Computer Science, Information Security, or related fieldMinimum of 3 years of experience in cybersecurity

Skills & requirements

Required

CybersecurityInformation SecurityRisk ManagementSecurity ComplianceSecurity ArtifactsContinuous MonitoringSecurity AuditsSecurity Training

Preferred

Vulnerability ManagementAudit Reduction ToolsDISA StigsSCAP Compliance CheckerManaging Poa&ms

Stack & domain

CybersecurityVulnerability ManagementAudit Collection ToolsInformation System Configuration ManagementSecurity Control TestingSystem Security ArtifactsRMF And A&A ProcessContinuous Monitoring ActivitiesNispomDAAGICDNIST 800-53CommunicationTeamworkProblem-solvingLeadershipAttention To DetailSec+CASPCisspCISMDefenseInformation Systems

About the role

Original posting from ENSCO, Inc. via Greenhouse

For more than 50 years, ENSCO has been providing leading-edge engineering, science and advanced technology solutions to governments and private industries worldwide.

ENSCO prides itself in creating and applying advanced technologies for mission success. We provide systems engineering, integration, and advanced technology services to transform the future safety, security, and resiliency of critical missions on the ground, in the air, in space, and in the information systems that connect these domains.

Learn more about ENSCO.

Position DescriptionENSCO, Inc. has an opportunity for a motivated Information System Security Officer (ISSO) in Colorado Springs, Colorado. The ISSO will support the Information System Security Manager (ISSM) with implementing and maintaining a strong cybersecurity program for ongoing contracts with the US Space Force.  The successful candidate will have the opportunity to contribute to the development of implementation plans and procedures to meet NISPOM, DAAG, and ICD requirements in support of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process as well as provide protection and safeguarding of information systems.  Position is in Colorado Spring, Colorado.

Duties and Responsibilities include:

Support the ISSM in achieving authorization to operate (ATO) for assigned information systems.

Ensure assigned information systems comply with USG cybersecurity requirements.

Provide initial and recurring general and privileged user training for project team members.

Identify, assess, and mitigate system security threats and risks.

Define, document, and maintain security artifacts for the information system.

Partner with appropriate stakeholders to evaluate cybersecurity risks and vulnerabilities.

Review and analyze weekly system-level security audits to ensure integrity of approved baselines.

Conduct continuous monitoring activities on assigned information system per the approved security plan.

Qualifications Required:

Bachelor’s degree or equivalent experience

Minimum of 3 years of experience as a cybersecurity professional supporting classified systems authorized approved IAW 32 CFR Part 117, DAAG, ICD 503, and/or NIST 800-53

DoD Approved 8570 IAM Level I certification (Sec+, CASP, CISSP, CISM, etc.) or be willing to obtain one within 6 months of hire as a condition of continued employment.

Experience with vulnerability management and audit collection tools

Solid understanding of information system configuration management, security control testing, and maintenance

Demonstrable experience maintaining system security artifacts in support of the RMF and A&A process.

Effective verbal and written communication skills with the ability to offer experienced guidance to executive staff, customers, and subcontractors.

Experience preparing for and participating in government security reviews and on-site validation activities.

Ability to prioritize, follow tasks through to completion, and work with minimal supervision.

AN ACTIVE TOP SECRET CLEARANCE WITH SCI ELIGIBILITY (TS/SCI) IS REQUIRED FOR WHICH YOU MUST BE A U.S. CITIZEN. YOU MUST MAINTAIN THE REQUIRED CLEARANCE.

Qualifications Desired:

Prior cybersecurity compliance experience.

Experience with eMASS.

Experience with audit reduction tools, vulnerability scanners, DISA STIGs, SCAP Compliance Checker, and managing POA&Ms

Work Location Type: On-Site

Required Certifications: Ability to obtain an IAT/IAM Level I Certification no later than six months from your date of hire

U.S. Citizenship Required: Yes

Security Clearance Required: TS/SCI

Employment Type: Regular Full-time

Background Check Type: 7 Year Pre-Employment

Drug Screen Required: None

Position Contingent Upon Contract Award: No

Salary Range$73,923.20—$133,307.20 USDREAL ID Requirement

This position may require the ability to access to U.S. federal facilities. In accordance with the Department of Homeland Security’s enforcement of the REAL ID Act, as of May 7, 2025, individuals must present a REAL ID-compliant form of identification or an acceptable alternative to gain entry. For a list of acceptable forms of identification, please click here.

Benefits

At ENSCO, a positive working environment and a competitive salary are only part of the reason for choosing a career here. We offer a comprehensive benefits package that creates a stimulating and supportive environment where you can thrive - visit ensco.com/careers/benefits to learn more.

Export Control and Licensing

This position may involve access to technology or technical data that is controlled under U.S. export control laws and regulations and the release of which to a non US person may require an export license from the U.S. Government.

Privacy

Your data privacy is important to ENSCO. Please click here to view our privacy policy. California residents can click here to view your California privacy rights.

EEO Statement

ENSCO, Inc. and its wholly owned U.S. subsidiaries are Equal Opportunity Employers– veterans, disability

Source: ENSCO, Inc. careers (Greenhouse)

Similar roles

More roles at ENSCO