5+ years of experience as an Information Systems Security Officer (ISSO)
Expertise in systems security requirements and policy
Strong incident response and management skills
Familiarity with security frameworks like NIST, ISO 27001, and CIS Controls
Extensive experience with threat monitoring platforms
Knowledge of security technologies such as firewalls, IDS/IPS, and SIEM systems
Proficient in compliance requirements, particularly FISMA
Responsibilities
Implement and enforce information systems security policies and procedures
Monitor system security posture and coordinate incident response
Conduct security risk and vulnerability assessments
Manage cybersecurity tools including firewalls and SIEM platforms
Analyze security data to identify risks and recommend actions
Ensure compliance with federal cybersecurity requirements
Develop and maintain internal security policies and standards
Benefits
Opportunity to work in a high-visibility, mission-driven environment
Collaboration with government and contractor stakeholders
Engagement in national security and counterterrorism operations
On-site position in Vienna, VA
Support for continuous security improvement initiatives
Full Job Description
Data Intelligence, LLC is seeking a skilled Senior Information Systems Security Officer (ISSO) to support a top-tier federal client engaged in national security and counterterrorism operations. This full-time position, based in Vienna, VA, plays a critical role in securing complex IT systems in a high-visibility, mission-driven environment. The selected candidate will work closely with government and contractor stakeholders to ensure compliance, manage risk, and defend against evolving cyber threats. This is an on-site position in Vienna, VA. It requires a current, active TS/SCI w/poly clearance.
Key Responsibilities:
Implement, maintain, and enforce information systems security requirements, policies, standards, and procedures.
Monitor system security posture, identify potential threats, and coordinate incident response and remediation activities.
Conduct security risk assessments, vulnerability assessments, and system scans to identify and address potential security weaknesses.
Configure, manage, and maintain cybersecurity tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and security information and event management (SIEM) platforms.
Analyze security monitoring data, system logs, and vulnerability scan results to identify risks and recommend corrective actions.
Support compliance with federal cybersecurity requirements, including the Federal Information Security Modernization Act (FISMA).
Apply established security frameworks and standards, including NIST, ISO 27001, and CIS Controls.
Develop, implement, and maintain internal security policies, agency standards, and operating procedures.
Evaluate network architecture, communication protocols, and system configurations to identify security risks.
Assess encryption technologies, key management practices, and data protection controls.
Evaluate and strengthen security configurations across Windows and Linux operating systems.
Collaborate with technical teams and stakeholders to address security findings, implement safeguards, and support continuous security improvement.
Required Experience:
5+ years experience in an ISSO capacity.
Demonstrated expertise in systems security requirements and policy.
Strong incident response and management experience
Demonstrated experience with, and knowledge of, security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
Extensive use of threat monitoring platforms.
Experienced with, and knowledgeable of, security technologies, tools, and methodologies (e.g. firewalls, IDS/IPS, SIEM systems).
Can demonstrate experience with network protocols and architecture.
Heavy experience with data encryption techniques and key management practices.
Proficiency with compliance requirements (FISMA).
Ability to work with operating systems (e.g. Windows and Linux) and their security features.
Experience conducting and analyzing system scans.
Hands-on with designing and implementing security internal policies, agency standards, and procedures.
Proficiency with risk assessment and management techniques.
Experienced configuring and managing security tools and systems.
