Information System Security Officer (ISSO)

Peraton•Herndon, VA

5d•$135,000 - $216,000

About The Position

Peraton’s Space & Intelligence Sector is seeking a mid-to-senior Information System Security Officer (ISSO) to join a development team in its Herndon, Virginia office. The role supports Intelligence Community systems and helps ensure they remain compliant, accredited, and operational within customer security requirements. The ISSO is embedded with the program and works directly with system owners, engineers, and government personnel to maintain security posture and keep mission systems running.

Requirements

Active TS/SCI with Polygraph.
Bachelor’s degree and 8 or more years of relevant experience; or a Master’s degree and 6 or more years of relevant experience; or 4 or more years of relevant experience in lieu of a degree.
Active DoD IAT Level I Certification.
Experience supporting Assessment and Authorization (A&A) activities and associated information assurance processes and documentation using RMF.
Experience supporting Intelligence Community or DoD mission systems.
Experience with RMF and Xacta.
Solid understanding of ICD 503, RMF, NIST SP 800-53, DIA policies, and DoD cybersecurity requirements.
Strong writing and system security documentation skills.
Ability to communicate effectively with technical and non-technical personnel.
Ability to take direction and work productively as part of a team.

Nice To Haves

Background with cross-domain environments, classified networks, or cloud-based systems in the Intelligence Community.
Experience working with Splunk.
Experience supporting programs with tight operational timelines and rapid change cycles.
Experience working with AWS- or Google Cloud-hosted information systems or applications.
Experience working with Red Hat or CentOS Linux operating systems.
Experience working in a DevSecOps environment.

Responsibilities

Serve as the security lead for assigned systems and as the direct interface with customer security teams and program leadership.
Maintain and update RMF and ICD 503 artifacts, including SSP, SCTM, POA&M, and IRP, as systems evolve.
Track vulnerabilities, coordinate patching and remediation, and ensure findings are closed on schedule.
Manage continuous monitoring activities, including scanning, log review, security reporting, and compliance checks.
Support accreditation and re-accreditation activities by preparing documentation and coordinating actions with the team.
Validate and oversee technical controls across system components, including OS hardening, access controls, auditing, and configuration management.
Provide security guidance on system changes, new integrations, and capability deployments.
Work with users, administrators, and developers to ensure changes meet customer security expectations before implementation.
Maintain awareness of existing and potential program risks and communicate impacts and required mitigations to leadership.