Senior Information Systems Security Officer
Full Time Employee 100000 - 150000 USD per-year-salaryJob Overview
Job Description:
We are seeking a mid-level Information System Security Officer (ISSO) to support and manage classified and/or sensitive information systems operating under the Department of Defense (DoD) Special Access Program (SAP) environment. The ISSO will ensure systems remain compliant with applicable cybersecurity and RMF requirements while supporting secure operations, accreditation activities, continuous monitoring, and audit readiness.
The ideal candidate has experience administering and securing SAP information systems, working with government security stakeholders, and implementing cybersecurity controls in accordance with NIST, JSIG, and DoD policies.
Job Description:
We are seeking a mid-level Information System Security Officer (ISSO) to support and manage classified and/or sensitive information systems operating under the Department of Defense (DoD) Special Access Program (SAP) environment. The ISSO will ensure systems remain compliant with applicable cybersecurity and RMF requirements while supporting secure operations, accreditation activities, continuous monitoring, and audit readiness.
The ideal candidate has experience administering and securing SAP information systems, working with government security stakeholders, and implementing cybersecurity controls in accordance with NIST, JSIG, and DoD policies.
What you'll do:
- Manage day-to-day cybersecurity operations for SAP information systems and networks.
- Ensure compliance with RMF, JSIG, NIST 800-53, ICD 503, and applicable DoD cybersecurity policies.
- Support system accreditation activities, including authorization packages, POA&Ms, SSPs, and security control assessments.
- Maintain continuous monitoring activities, including vulnerability management, patch management, configuration management, and audit log reviews.
- Conduct periodic security audits, inspections, and self-assessments.
- Coordinate with ISSMs, system administrators, program managers, and government customers to resolve cybersecurity findings and maintain system authorization status.
- Review and evaluate hardware/software changes for security impact and compliance.
- Assist with incident response activities, reporting, and remediation efforts.
- Support account management processes, media control, system access reviews, and privileged user oversight.
- Ensure cybersecurity documentation remains accurate and current throughout the system lifecycle.
- Participate in security testing, vulnerability scanning, and remediation tracking.
- Provide cybersecurity guidance and training to system users and administrators.
Required qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be substituted.
- 3-5 years of cybersecurity or information assurance experience.
- Experience supporting classified or SAP information systems in a DoD environment.
- Working knowledge of RMF accreditation processes and cybersecurity compliance frameworks.
- Familiarity with NIST 800-53, JSIG, STIGs, ACAS, SCAP, and related security tools.
- Experience managing vulnerability remediation and security compliance activities.
- Strong understanding of Windows and/or Linux operating systems in secure environments.
- Ability to work independently and manage multiple priorities in a fast-paced environment.
- Excellent written and verbal communication skills.
- Active DoD 8570/8140 compliant certification such as Security+, CISSP, CASP+, or equivalent.