Information Systems Security Officer - TS/SCI with Polygraph

About the role

As an Information Systems Security Officer (ISSO) you will support customer activities by providing expert‑level security knowledge, constructing thorough security documentation, and ensuring the security posture of systems across cloud and on‑premise environments. You will work within a highly skilled team delivering cyber security risk‑management “as a service” for a federal customer.

Responsibilities

• Collaborate with the program security team to address all aspects of security.
• Apply expert knowledge of the Risk Management Framework (RMF) and NIST SP 800‑53 to support systems through the Authorization & Accreditation (A&A) process.
• Develop and maintain security documentation such as System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other artifacts for the Body of Evidence (BOE).
• Identify security controls and work with engineering, development, and testing staff to create appropriate test plans and procedures.
• Conduct security audit reviews, ensuring audit records are collected, reviewed, and acted upon.
• Coordinate security testing exercises with external assessment teams and internal technical staff.
• Configure and support cloud‑native services to protect the system’s security posture.

Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline.
• 8+ years of related experience in information security, risk management, or cyber security.
• Active Top Secret/SCI clearance with polygraph.
• U.S. citizenship.
• Location: McLean, VA (on‑site work).
• Travel: less than 10%.
• Scheduled weekly hours: 40.
• Telecommuting: onsite work required.

Qualifications

• Strong technical and analytical abilities; experience performing system security analysis and risk management.
• Demonstrated experience with security in cloud environments (AWS, Azure, GCP).
• Ability to translate system and application knowledge into security test plans and conduct hands‑on testing.
• Knowledge of risk management methodologies and ability to analyze test results and recommend mitigations.
• Experience with system configuration, development, and design for enterprise systems and hypervisors.
• Proficiency with Linux and virtual platforms.
• Experience working with public and private information security groups and organizations.
• Effective communication of vulnerability findings and risk posture to senior executives.
• Broad understanding of information security policies and guidance, with ability to assist in policy development.

Preferred Certifications

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• AWS Certified Cloud Practitioner (CCP)
• Microsoft Azure certification
• Google Cloud Platform (GCP) certification

Benefits

• 401(k) with company match.
• Comprehensive health and wellness packages, including medical, dental, and vision plans (some with Health Savings Accounts).
• Internal mobility team to support career growth.
• Access to cutting‑edge technology and learning opportunities.
• Paid vacation, holidays, sick and personal time, as well as parental, military, bereavement, and jury duty leave.
• Full‑flex work weeks where possible.
• Short‑ and long‑term disability, life, accidental death & dismemberment, personal accident, critical illness, and business travel & accident insurance.

Pay

The likely salary range for this position is $158,626 – $214,611, with final compensation based on experience, geographic location, and contractual requirements.