Information Systems Security Officer

Leidos•Tampa, FL

7h•Onsite

About The Position

The Digital Modernization Sector at Leidos is pursuing a new opportunity with openings for an Information System Security Officer (ISSO) to work in Tampa, FL. This role supports the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application, and Training (EDAT) mission, focusing on providing innovative, data-driven solutions and enterprise architecture enhancements for USSOCOM's global network. The program emphasizes rapid development and deployment of technologies to enhance the mobility and readiness of Special Operations Forces (SOF). Key tasks include program management, application development, training support, and technology integration. The EDAT program prioritizes agility and adaptability to ensure SOF professionals have the necessary information and tools for evolving mission requirements.

Requirements

Bachelor’s degree in Cybersecurity, Information Assurance, or related discipline and 12 years of relevant experience, or a Master’s degree with 8 years of relevant experience.
Active Top Secret security clearance.
Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), or CompTIA Advanced Security Practitioner (CASP+).
Demonstrated knowledge of the NIST RMF, eMASS workflows, and DoD cloud accreditation processes.
The ability to work through complex problems using applied technical knowledge, understanding, reasoning and interpretation.
Proven experience managing security compliance for cloud-hosted solutions in Azure or similar environments.
Strong understanding of DISA STIGs, NIST 800-53 controls, and vulnerability management processes.
Familiarity with DevSecOps and Agile SDLC methodologies from a governance and compliance oversight perspective.
Has in-depth understanding of technical principles, theories, concepts and their application across range of programs.
Proven success in liaising with AOs, ISSMs, and system owners to navigate and expedite RMF-based accreditation efforts.
Excellent written and verbal communication skills with the ability to brief complex security concepts to both technical and non-technical stakeholders.

Nice To Haves

Bachelors degree Computer IS Systems, Cybersecurity, Information Assurance, or a related field and 12+ years of prior relevant experience as an ISSO or in a similar cybersecurity compliance oversight role supporting DoD systems or a Masters degree in Information Technology or related field and 10 years of prior relevant experience in cybersecurity compliance.
Familiarity with supporting systems at multiple classification levels (e.g., Unclassified, Secret).
Knowledge of emerging cybersecurity technologies and their implications for DoD cloud security compliance.

Responsibilities

Serve as the lead Information Systems Security Officer (ISSO) embedded with a software development team, ensuring all cybersecurity compliance requirements are met throughout the Software Development Lifecycle (SDLC) for Azure-based portal and gateway applications.
Guide the development team in interpreting and applying DoD cybersecurity policies, NIST RMF guidance, and DISA STIG requirements throughout system development and deployment.
Ensure full compliance with applicable security frameworks, including the NIST Risk Management Framework (RMF), FedRAMP, and the DISA Cloud Computing Security Requirements Guide (SRG).
Own and maintain key security documentation such as the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Security Assessment Report (SAR), and supporting artifacts required for achieving and sustaining an Authority to Operate (ATO).
Coordinate closely with Authorizing Officials (AOs), Information System Security Managers (ISSMs), system owners, and other stakeholders to manage and drive the ATO process across multiple classification levels.
Provide oversight and direction for the integration of enterprise cybersecurity services (e.g., ACAS, HBSS, BCAP, PKI/ICAM) and ensure these services are properly accounted for in security documentation and compliance testing.
Monitor and assess system vulnerabilities and audit results; ensure findings are documented and tracked to closure in accordance with policy.
Mentor junior cybersecurity personnel and foster a compliance-driven security culture within cross-functional teams.
Participate in Agile and Waterfall development meetings to provide governance input and security policy guidance that aligns with DoD accreditation expectations.
Stay informed of changes in DoD cybersecurity guidance, threat landscape developments, and cloud security best practices to adjust compliance strategies as needed.