Information System Security Officer (ISSO)

  • ASHBURN, VA
  • Posted 1 day ago | Updated 3 hours ago

Overview

On Site
Full Time

Skills

Information System Security
Information Systems
Risk Management Framework
RMF
Continuous Monitoring
Information Security Management
FISMA
Program Management
WebInspect
Reporting
Privacy
Documentation
Auditing
Event Management
Kibana
Security Controls
Management
Linux
Nessus
System Security
Writing
Information Assurance
Cyber Security
Regulatory Compliance
CISSP
Cisco Certifications
Certified Ethical Hacker
Contingency Plan
Splunk
SIEM
Cloud Computing
Amazon Web Services
IT Security
DoD
STIG
Business Intelligence
Security Clearance
Information Technology
Systems Engineering
FOCUS

Job Details

Job ID: 2506717

Location: ASHBURN, VA, US

Date Posted: 2025-06-13

Category: Information Technology

Subcategory: IT Security Administrator

Schedule: Full-time

Shift: Day Job

Travel: Yes, 10 % of the Time

Minimum Clearance Required: None

Clearance Level Must Be Able to Obtain: Public Trust

Potential for Remote Work: Yes

Description

Job Description

SAIC is looking for an Information System Security Officer (ISSO) and/or Alternate Information System Security Officer (AISSO) for one or more major federal IT information systems as a member of the customer directorate's Security Team. Overall, they will be responsible for utilizing the NIST Risk Management Framework (RMF) and related Continuous Monitoring activities to maximize the security of their assigned system(s) and ensure compliance with Federal Information Security Management Act (FISMA) requirements and customer policies and processes.

This position is hybrid-remote requiring 2 days on-site per week in Ashburn, VA.

Responsibilities
  • Participate in program planning, prepare Authority to Test (ATT) and Significant Change (SC) documentation, and push these initiatives to completion.
  • Review Nessus, WebInspect, and DBProtect security scans, communicate vulnerabilities to technical stakeholders, and track them to remediation.
  • Proactively report security status and concerns to management and make recommendations as appropriate.
  • Assist directorate with yearly audit responses and security-related data calls to upper management and DHS OCIO.
  • Develop and update standard government security documentation such as System Security Plans, Contingency Plans, Interconnection Security Agreements, Risk Acceptances/Waivers, Privacy Threshold Analyses, Privacy Impact Assessments, Interconnection Security Agreements, waiver requests, and other ad-hoc documentation as needed.
  • Review and approve/deny relevant system Change Requests as needed.
  • Perform system audit log reviews in accordance with established policy requirements using Security Information and Event Management (SIEM) tools such as Splunk, Kibana, etc.

Qualifications

Qualifications
  • Has created, tracked, and pushed to completion Plans of Action and Milestones (POA&Ms) for resolving security control deficiencies.
  • Has completed a new or renewed system Certification and Accreditation (C&A) package from start to finish.
  • Is experienced in effectively communicating security vulnerabilities with technical POCs and management.
  • Has significant security experience with systems primarily supported by Linux OS (on premises) or Amazon Web Services (AWS).
  • Has significant experience and knowledge of how to interpret details of vulnerability scans, including Tenable Nessus.
  • Has significant experience writing or updating system Security Plans.
  • Ability to communicate effectively verbally and in writing.
  • Prior experience supporting the federal government in an IT environment.
  • Experience creating, tracking, and updating Interconnection Security Agreements (ISAs), risk acceptance memorandums, and policy waiver requests.

Education and Experience
  • BS or equivalent work experience in the Information Assurance / Cybersecurity field.
  • 9+ years of overall IT security experience.
  • 2+ years of experience as a primary ISSO or security compliance lead for an IT system.
  • Possess one of the following: CISSP, CCSP, or CEH certifications.
  • Has led annual Contingency Plan Tests in either tabletop form or as actual fail-over tests.
  • Experience creating, tracking, and updating security policies and/or procedures.
  • Expertise in using Splunk or other SIEM tools.
  • Security experience with cloud systems hosted by Amazon Web Services (AWS).
  • Experience leading an IT security team.
  • Experience with DoD STIG system configuration standards.

BI Requirement
  • Current holder (with an ability to maintain) of a DHS Public Trust / CBP Background Investigation (BI) clearance (requiring ship).

Note: Employment will be contingent upon having/obtaining a DHS Public Trust / CBP BI clearance prior to starting.


Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About SAIC