Information Security System Officer (ISSO)

Applied Intuition•Poway, CA

1d•$125,000 - $180,000•Onsite

About The Position

Applied Intuition’s EpiSci division develops tactical autonomy solutions for national security. The Information Security System Officer owns the day-to-day security posture of EpiSci’s classified information systems, collateral programs, and Special Access Program across its Irvine and Poway facilities. The ISSO builds and maintains authorization packages under the Risk Management Framework, applying guidance from JSIG, DAAPM, ICD-503, CMMC, and the NIST 800 series. Working directly with the ISSM, the role supports assessment and authorization by government authorizing officials from initial requirements through operational deployment and continuous monitoring. This is a hands-on position combining security documentation with configuration, scanning, remediation, and enclave stand-up. The role involves regular interaction with government security offices and authorizing officials, DCSA, and program security teams, and ongoing review of eMASS and program packages. Special Access Program access is required; prior SAP experience is strongly preferred, though candidates with collateral-only experience and a strong RMF record may be considered and read on after hire. The position is 100% on-site because classified work cannot be performed remotely. Travel between Irvine and Poway, California, and to customer and government sites is approximately 15–20%. Candidates must be U.S. citizens, hold an active DoD clearance, and be eligible and willing to accept SAP briefings.

Requirements

Bachelor’s degree in a relevant field, or at least 5 years of ISSO, ISSE, or cybersecurity policy and engineering experience in a classified environment.
DoD 8570/8140 IAM Level I/IAT Level 2 (Security+) certification as a condition of employment.
Demonstrated proficiency applying RMF and writing authorization packages, with working knowledge of ICD-503, JSIG, and the NIST 800 series, including 800-53, 800-37, and 800-171.
Hands-on experience with NESSUS and ACAS, DISA STIGs, STIG Viewer, SCAP Compliance Checker, and HBSS or ESS.
Experience designing, building, and maintaining information system enclaves, including underlying computing hardware and network architecture.
Working knowledge of incident response, disaster recovery, forensic principles, continuous monitoring, and cybersecurity hygiene.
Active DoD security clearance, at least SECRET, and U.S. citizenship.
Must be eligible for and willing to accept Special Access Program briefings.
Willingness to travel for company business between Irvine and Poway, California, and to customer and government sites (approximately 15–20%).

Nice To Haves

Prior SAP experience as an ISSO, ISSE, or system administrator under JSIG, with current or recent program briefings.
TS/SCI clearance and ability to obtain program access.
eMASS, Xacta, or equivalent package management experience as a package author.
Experience with DCSA DAAPM and NISPOM-governed facilities, including Co-Use or multi-program environments.
Prior ISSM designation, or readiness to be designated ISSM for a smaller program.
Hands-on Linux (RHEL, Rocky, Ubuntu) and Windows Server administration in air-gapped and cross-domain environments.
Familiarity with cross-domain solutions, COMSEC and TACLANE operations, or trusted download procedures.
CMMC assessment or preparation experience on the CUI side.
Experience supporting a rapid-prototyping or startup defense environment.

Responsibilities

Maintain accredited classified systems in an authorized operating state while meeting program delivery timelines.
Author, update, and defend RMF artifacts, including System Security Plans, Security Assessment Reports, POA&Ms, Risk Assessment Reports, Configuration Management Plans, Incident Response Plans, Continuous Monitoring Plans, and hardware and software baselines.
Execute continuous monitoring through ACAS and Nessus vulnerability scanning, SCAP and STIG compliance checking, audit log review, and remediation tracking for CAT I, II, and III findings.
Support the design, development, and implementation of procedures and systems for secure facilities, and ensure facility compliance with classified information system processing requirements.
Conduct risk and vulnerability assessments of planned and installed systems, identify vulnerabilities, threats, and protection needs, and recommend mitigations.
Lead periodic self-inspections and support DoD Cybersecurity On-Site Inspections, DCSA assessments, and customer security reviews across both sites.
Respond initially to classified security incidents and spillage by detecting and containing events, preserving evidence, documenting, and escalating through the ISSM and program security chain.
Administer and harden classified computing and network infrastructure, including standing up and configuring new enclaves.
Manage user account provisioning, privileged access reviews, media control, and trusted download and data transfer procedures.
Deliver security awareness and system-specific training to cleared users and system administrators.
Maintain working knowledge of evolving policy, regulation, and compliance guidance affecting classified computing assets.
Travel for company business between Irvine and Poway, California, and to customer and government sites, approximately 15–20%.