Information System Security Officers (ISSO)

Agile Defense • Washington, DC

2d • Hybrid

About The Position

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.

Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

SUMMARY: The Information System Security Officers (ISSO) bring valuable technical, policy, and business knowledge and advice to inform system security and risk management required to maintain the security posture of each IT system within defined portfolio.

Requirements

• CISSP or Security +
• Bachelor of Science Degree
• 3 -5 years of experience as an ISSO/ISSM
• 3 - 5 years ISSO/ISSM support including
• Maintain the security posture of assigned information systems and ensure compliance with federal security requirements (e.g., NIST, FISMA).
• Support system authorization and accreditation activities, including preparing and maintaining A&A documentation.
• Monitor system security controls and ensure they are implemented, operating, and effective.
• Perform continuous monitoring activities and review security logs, scans, and reports.
• Identify, track, and remediate vulnerabilities in coordination with engineering teams.
• Conduct periodic security assessments and risk analysis.
• Prepare and maintain system security plans, contingency plans, incident response plans, and related artifacts.
• Ensure proper configuration management practices are followed for all system changes.
• Support security incident response activities, including documenting and escalating events.
• Work closely with system owners, developers, and administrators to ensure security is integrated throughout the system lifecycle.
• Communicate security risks and recommendations to stakeholders and leadership.
• Ensure users maintain proper security awareness and follow established policies and procedures.
• Participate in audits and reviews, providing evidence, documentation, and responses as needed.
• Track and report on Plan of Action & Milestones (POA&Ms).
• Ensure compliance with policies related to access control, patch management, and security operations.

Responsibilities

• Serve as the primary liaison between the Cybersecurity Group, system owners, ECCP, and information owners on security and risk matters.
• Ensure systems follow security policies, including vulnerability scanning, patching, and configuration management.
• Verify compliance for commercial and open‑source software through OCIO governance processes.
• Support incident reporting and coordination with the SOC.
• Determine system categorization and control selection under the Risk Management Framework.
• Coordinate with stakeholders on ECCP controls and expansion of standard control providers.
• Manage IPAs and PIAs.
• Review security reports and participate in briefings with system owners and leadership.
• Monitor overall security posture and prepare updated Security Posture Reports.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees