Information Systems Security Officer (ISSO)

General Dynamics Information Technology • Annapolis Junction, MD

13h • Onsite

About The Position

As an Information Systems Security Officer (ISSO) supporting enterprise infrastructure services, you will safeguard critical information systems across multiple classified network domains. You will manage the full security lifecycle for assigned systems, ensure continuous compliance with cybersecurity standards, and help maintain resilient and secure mission enabling technologies. Your work strengthens system readiness, reduces risk, and ensures secure operations across globally distributed environments.

Requirements

• Active TS/SCI clearance with CI Polygraph
• Bachelor’s degree in an IT-related field, or 10+ years of relevant IT experience in lieu of a degree
• Meet DoD 8140 Information Assurance Workforce certification requirements (e.g. Security+ CE)
• Hands-on experience performing ISSO functions under the Risk Management Framework (RMF)
• Strong understanding of NIST SP 80037, 80053, CNSSI 1253, and FISMA-aligned security practices
• Experience managing authorization package documentation, vulnerability assessments, and STIG compliance
• Ability to evaluate system risks, track remediation, and coordinate security efforts across engineering and operations teams
• Familiarity with enterprise security logging tools (e.g., Splunk) and vulnerability monitoring tools
• Strong communication, documentation, and collaboration skills

Nice To Haves

• Classified Networks
• Cybersecurity Compliance
• DISA STIG
• ISSO
• RMF

Responsibilities

• Serve as the primary cybersecurity advisor on system security posture, threats, vulnerabilities, and compliance requirements
• Maintain and update security authorization packages, documentation, and baseline artifacts throughout the system lifecycle
• Ensure systems retain active Authority to Operate (ATO) through continuous monitoring, updates, and alignment with security policies
• Develop and manage POA&Ms, risk acceptance requests, waivers, and exceptions for identified vulnerabilities
• Perform periodic system reviews, update security controls, and coordinate required security-driven configuration changes
• Audit system logs and monitors outputs to identify compliance issues or abnormal activity and coordinate remediation
• Oversee secure system recovery, validating restoration of approved security configurations
• Manage system decommissioning activities, ensuring secure sanitization and proper documentation
• Collaborate with engineers, system owners, and technical teams to validate controls and support accreditation updates

Benefits

• Variety of medical plan options, some with Health Savings Accounts
• Dental plan options
• Vision plan
• 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays
• Paid parental, military, bereavement and jury duty leave
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior