Information System Security Officer (ISSO)

Peraton•Herndon, VA

4d•Onsite

About The Position

Peraton’s Space & Intelligence Sector is seeking a mid-to-senior Information System Security Officer to join a diverse development team in its Herndon, Virginia office. The ISSO supports Intelligence Community systems and helps ensure they remain compliant, accredited, and operational within customer security requirements. The role is hands-on and embedded with the program, working directly with system owners, engineers, and government personnel to maintain security posture and keep mission systems running without interruption.

Requirements

Active TS/SCI with Polygraph.
Bachelor’s degree with 8 or more years of relevant experience; master’s degree with 6 or more years of relevant experience; or 4 or more years of relevant experience in lieu of a degree.
Active DoD IAT Level I certification.
Experience supporting Assessment and Authorization activities and associated information assurance processes and documentation using RMF.
Experience supporting Intelligence Community or DoD mission systems.
Experience with RMF and Xacta.
Solid understanding of ICD 503, RMF, NIST SP 800-53, DIA policies, and DoD cybersecurity requirements.
Strong writing and system security documentation skills.
Ability to communicate effectively with technical and non-technical personnel.
Ability to take direction and work productively as part of a team.

Nice To Haves

Background with cross-domain environments, classified networks, or cloud-based systems in the Intelligence Community.
Experience working with Splunk.
Experience supporting programs with tight operational timelines and rapid change cycles.
Experience working with AWS- or Google Cloud-hosted information systems or applications.
Experience working with Red Hat or CentOS Linux operating systems.
Experience working in a DevSecOps environment.

Responsibilities

Act as the security lead for assigned systems and serve as the direct interface with customer security teams and program leadership.
Maintain Risk Management Framework (RMF) and ICD 503 artifacts, including SSP, SCTM, POA&M, and IRP, and update them as systems evolve.
Track vulnerabilities, coordinate patching and remediation with the team, and ensure findings are closed on schedule.
Manage continuous monitoring activities, including scanning, log review, security reporting, and compliance checks.
Support accreditation and re-accreditation activities by preparing documentation and coordinating actions with the team.
Validate and oversee implementation of technical controls across system components, including OS hardening, access controls, auditing, and configuration management.
Provide security guidance on system changes, new integrations, and capability deployments.
Work with users, administrators, and developers to ensure changes meet customer security expectations before implementation.
Maintain awareness of existing and potential program risks and communicate impacts and required mitigations to leadership.