Job DescriptionACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIREDWe are seeking an
Information Systems Security Officer (ISSO) to manage and enforce information assurance (IA) programs across critical defense and intelligence enclaves. In this role, you will be responsible for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. You will manage day-to-day security operations, perform risk and vulnerability assessments, evaluate enterprise security solutions, and lead Assessment & Authorization (A&A) activities under the NIST Risk Management Framework (RMF). From maintaining Configuration Management (CM) control to preparing comprehensive System Security Plans (SSPs), you will ensure system compliance while enabling mission execution.
The annual base salary range for this role is $135,,000-$160,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.
Required Skills- Information Assurance & Governance: Proven ability to propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies across programs, systems, and enclaves.
- NIST RMF & Authorization Support: Hands-on experience driving security authorization activities in compliance with the National Institute of Standards and Technology Risk Management Framework (NIST RMF).
- Security Documentation & Artifact Creation: Deep experience preparing, reviewing, and updating System Security Plans (SSPs), Risk Assessment Reports (RARs), Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
- Vulnerability & Risk Assessment: Skilled in conducting vulnerability, threat, and risk assessment analyses to support system accreditation and continuous monitoring.
- Configuration Management (CM) & Impact Analysis: Experience managing system change controls, evaluating security solutions for processing classified information, and assessing the security impact of hardware, software, and firmware modifications.
Education:
Bachelor's Degree in Data Science, Computer Science, Computational Linguistics, Mathematics, or a related technical discipline, PLUS
7+ years of professional experience in data science, NLP, or software engineering OR
High School Diploma / GED, PLUS
11+ years of specialized technical experience in lieu of a degree.
Desired SkillsIndustry Certifications: Active IAM/IAT Level II or III certifications (e.g., CISSP, CISM, CAP/CGRC, Security+, CASP+).
Scanning & Audit Tools: Experience utilizing automated compliance and vulnerability scanning tools (e.g., Nessus/Tenable, XACTA, STIG Viewer, SCAP Compliance Checker).
Cross-Domain & Cloud Security: Familiarity with cross-domain solutions, cloud security concepts (AWS/Azure gov clouds), or containerized enclave security.
Continuous Monitoring: Practical experience implementing continuous monitoring strategies and managing Plans of Action and Milestones (POA&Ms).
