Senior Information Systems Security Officer (ISSO)

About the role

MITRE is a nonprofit engineering, applied research, and advanced technology organization that works in the public interest. The Cybersecurity Risk Management Department within the Global Security Division seeks a Senior Information Systems Security Officer (ISSO) to provide Information Assurance and Cybersecurity services for classified systems. The role involves integrating security into engineering projects, supporting classified environments, and contributing to advanced security concepts.

Responsibilities

• Lead cybersecurity efforts for classified systems, ensuring compliance with Risk Management Framework (RMF) policies and procedures.
• Develop, implement, and monitor security programs, including System Security Plans (SSPs), Risk Assessment Reports, and Security Controls Traceability Matrix (SCTM).
• Perform vulnerability and risk assessments, continuous monitoring, and self‑inspections to ensure compliance and mitigate risks.
• Maintain operational security posture, oversee security documentation, and coordinate with stakeholders for accreditation and change management.
• Mentor junior staff, improve cybersecurity processes, and provide subject‑matter expertise on advanced technologies.
• Collaborate with system administrators and engineers to enhance policies, processes, and risk mitigation strategies.

Basic Qualifications

• Typically requires a minimum of 5 years of related experience with a Bachelor’s degree; or 3 years with a Master’s degree; or a PhD with relevant experience; or an equivalent combination of education and work experience.
• Expertise in RMF, NIST SP 800‑53, STIGs, SCAP, and classified infrastructure.
• Proficiency with security tools such as E‑Mass and XACTA.
• Strong communication skills for engaging senior government leaders and technical peers.
• IAM Level III certification per DoD 8570.01M.
• Active Top Secret U.S. Government‑issued Security Clearance.
• U.S. citizenship required to obtain a security clearance.

Preferred Qualifications

• Proficiency with security tools ACAS, Forescout, Trellix, and Splunk.
• Experience with DCSA CCRI or CORA audits.
• Experience with Continuous Monitoring (RMF Step 7).

Pay

Salary compensation range: $129,200 – $161,500 – $193,800.

Schedule

On‑site work requirement of five days per week at the designated MITRE location.