Information System Security Officer (ISSO)

Peraton•Herndon, VA

3d•$135,000 - $216,000•Onsite

About The Position

Peraton’s Space & Intelligence Sector is looking for a mid-to-senior Information System Security Officer (ISSO) to join a diverse development team at our Herndon, VA, office. In this role, you will support IC systems and ensure they remain compliant, accredited, and operational within the customer’s security requirements. This role is hands-on and embedded with the program, working directly with system owners, engineers, and the government to maintain security posture and keep mission systems running without interruption.

Requirements

Active TS/SCI with Polygraph
Bachelor's degree with 8+ years of relevant experience; Master's degree with 6+ years of relevant experience or 4+ years of relevant experience in lieu of a degree
Experience supporting Assessment and Authorization (A&A) activities and the associated information assurance processes and documentation using RMF
Experience supporting Intelligence Community or DoD mission systems
RMF and Xacta experience
Active DoD IAT Level I Certification
Solid understanding of ICD 503, RMF, NIST SP 800-53, DIA policies, and DoD cybersecurity requirements
Strong writing and system security documentation skills
Ability to communicate effectively with technical and non-technical personnel
Ability to take direction and work productively as a part of a team

Nice To Haves

Background with cross-domain environments, classified networks, or cloud-based systems in the intelligence community
Experience working with Splunk
Experience supporting programs with tight operational timelines and rapid change cycles
Experience working with AWS/Google cloud-hosted information systems or applications
Experience working with Redhat or CentOS Linux operating systems
Experience working in a DevSecOps environment

Responsibilities

Act as the security lead for assigned systems, serving as the direct interface with the Customer’s security team(s) and program leadership.
Maintain RMF and ICD 503 artifacts (SSP, SCTM, POA&M, IRP, etc.) and update them as the system evolves.
Track vulnerabilities, coordinate patching and remediation with team, and ensure findings are closed on schedule.
Manage continuous monitoring activities, including scanning, log review, security reporting, and compliance checks.
Support accreditation and re-accreditation activities; prepare documentation and coordinate actions with team.
Validate and oversee implementation of technical controls across system components (OS hardening, access controls, audit, configuration management).
Provide security guidance on system changes, new integrations, or capability deployments.
Work with users, administrators, and developers to ensure changes meet Customer security expectations before being implemented.
Maintain situational awareness of existing and potential program risks and communicate impacts and required mitigating actions to leadership.