Information System Security Officer (ISSO)

AnaVation•Huntsville, AL

7d•Onsite

About The Position

AnaVation is seeking an Information System Security Officer (ISSO) to join our growing Huntsville, Alabama work program. The selected candidate provides advanced security oversight, compliance monitoring, and protection of mission-critical systems within a major federal modernization program. The ISSO ensures all systems, applications, data flows, and development environments adhere to federal security policies, controls, accreditation requirements, and continuous monitoring standards. This role partners with engineering, cloud, DevSecOps, QA, and operations teams to ensure security is embedded across all phases of delivery.

Requirements

Bachelor’s degree and 8+ years of experience in cybersecurity, ISSO support, or security engineering.
Strong understanding of federal security frameworks and compliance requirements.
Experience performing vulnerability scanning, interpreting findings, and driving remediation.
Proficiency with identity/access management, system hardening, logging, and auditing.
Strong communication skills for partnering with technical teams and leadership.
Must be able to work full-time on-site at our customer location in Huntsville, Alabama.
Active Top Secret (TS) clearance with eligibility for Sensitive Compartmented Information (SCI) and the ability to obtain a CI polygraph.

Nice To Haves

Experience supporting federal modernization or national-security programs.
Familiarity with cloud environments (AWS strongly preferred).
Experience with DevSecOps practices, CI/CD pipeline security, and automated scanning.
Security certifications such as CISSP, CISM, Security+, or similar.

Responsibilities

Implement and maintain federal security policies, controls, standards, and required documentation, including SSPs, POA&Ms, and control evidence.
Support continuous monitoring, vulnerability management, remediation tracking, audits, assessments, and accreditation activities.
Ensure applications, systems, and cloud environments remain compliant with applicable federal security frameworks.
Provide guidance on secure architecture, system hardening, access controls, authentication, data handling, and security requirements.
Identify security risks, findings, and incidents, and coordinate mitigation, remediation, and corrective actions across technical teams.
Partner with engineering, cloud, DevSecOps, QA, data, and product teams throughout planning, development, testing, and release activities.
Maintain security documentation, metrics, dashboards, vulnerability reports, and risk summaries.
Communicate security posture, risks, incidents, and mitigation strategies to program leadership and stakeholders.