Information Systems Security Officer II/III

XSITE LLC • San Diego, CA

22h • $95,000 - $141,000 • Hybrid

About The Position

XSITE LLC is seeking an Information Systems Security Officer (ISSO) to support the anticipated PMW/A 170 office/contract in San Diego, CA. This position is contingent upon contract award and Government approval. XSITE LLC is a Service-Disabled Veteran-Owned Small Business providing full-spectrum systems and systems-of-systems engineering and integration services for space, C5ISR, cyber, and enterprise information systems. Our core capabilities include AI/ML, Software Development & Sustainment, Systems Engineering (including MBSE), and Modeling & Simulation.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, Business, Management, or a related technical or managerial field preferred. Additional relevant cybersecurity, military, Navy, RMF, A&A, or information assurance experience may be considered in lieu of degree.
• 3–10 years of practical experience in cybersecurity, information assurance, engineering, test and evaluation, RMF, A&A, C&A, or related information system security support.
• Experience supporting RMF, A&A, ATO lifecycle, cybersecurity compliance, or Navy/DoD information system security activities.
• Experience preparing, maintaining, or reviewing cybersecurity artifacts and compliance documentation in support of ATO requirements.
• Experience with Information Assurance tools such as eMASS and ACAS/Nessus.
• Working knowledge of RMF, ATO requirements, POA&M tracking, vulnerability management, security controls, and information system security posture maintenance.
• Active U.S. Secret clearance preferred; ability to obtain and maintain required clearance is required.
• Strong written and verbal communication skills, with the ability to coordinate across technical teams, Government stakeholders, and program leadership.

Nice To Haves

• Prior experience supporting PMW/A 170, PEO C4I, NAVWAR, NIWC, Navy PNT systems, or other Navy C4I/cybersecurity programs.
• Current DoD 8140/8570-compliant certification such as Security+, CAP, CASP+, CISSP, CISM, GSLC, or equivalent.
• Experience supporting classified and/or mission-critical Navy or DoD systems.
• Experience with POA&M management, vulnerability remediation coordination, annual security reviews, continuous monitoring, and ATO sustainment.
• Familiarity with CYBERSAFE, Cross Domain Solution documentation, Navy authorization packages, or Security Control Assessor coordination.
• Experience supporting system boundary validation, hardware/software baselines, configuration control, or Baseline Change Requests.

Responsibilities

• Support Risk Management Framework (RMF), Assessment & Authorization (A&A), and Authorization to Operate (ATO) activities for Navy/DoD information systems.
• Develop, review, maintain, and update cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Security Categorization documentation, Privacy Impact Assessments, and related A&A artifacts.
• Support continuous monitoring, annual security reviews, control validation, and audit-readiness activities.
• Coordinate with system owners, engineers, administrators, Security Control Assessors, Authorizing Officials, and other stakeholders to support cybersecurity compliance and risk management.
• Track, document, and support remediation of vulnerabilities, STIG findings, POA&M items, and other cybersecurity risks.
• Use cybersecurity and information assurance tools such as eMASS, ACAS/Nessus, STIG Viewer, and related DoD/Navy systems as required.
• Support configuration management and baseline change activities to ensure cybersecurity impacts are identified, documented, and addressed.
• Assist with cybersecurity inputs for system changes, boundary updates, hardware/software lists, network diagrams, and authorization packages.
• Maintain awareness of applicable DoD, Navy, and federal cybersecurity policies, including RMF, NIST SP 800-53, DoDI 8510.01, and DoD 8140/8570 workforce requirements.

Benefits

• Industry-leading PTO package, starting at 15+ days annually.
• Seven paid company holidays annually, including New Year’s Day, Memorial Day, Independence Day, Labor Day, Veterans Day, Thanksgiving Day, and Christmas Day.
• 100% employer-paid employee coverage for Medical, Dental, Vision, and Basic Life Insurance.
• Employees enrolled in XSITE’s High Deductible Health Plan are also eligible for a Health Savings Account with employer contributions.
• Eligibility to participate in XSITE’s 401(k) retirement plan with up to a 6% employer match.
• Eligibility to receive tuition reimbursement of up to $5,250 per year for job-related education.
• University of San Diego Education Benefits, including 10% tuition discount on select online degree programs and 25% discount on certificate programs.
• Cell phone stipend.
• Hybrid work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level