Senior Information Systems Security Officer (ISSO)

DAn Solutions • Annapolis Junction, MD

2d • Onsite

About The Position

DAn Solutions is seeking a Senior Information Systems Security Officer (ISSO) to support a federal intelligence community program. The ISSO will shape and enhance cybersecurity initiatives, ensure system security compliance, manage risks, and support certification and authorization activities throughout the program lifecycle. The role collaborates with application leads, system administrators, database administrators, developers, testers, and cybersecurity stakeholders to ensure systems are developed and maintained in accordance with applicable security requirements and achieve and maintain Authorization to Operate (ATO).

The position provides security guidance to development and engineering teams, supports security assessment events, and develops and maintains security documentation using XACTA. It also coordinates Interim Authorization to Test (IATT) and ATO activities and implements and validates NIST SP 800-53 controls in cloud-native Data Platform as a Service (DPaaS) environments, applying Zero Trust principles to data services.

The role requires an active/existing TS/SCI clearance with polygraph and is not remote. Primarily on-site support is required at a designated program location, with seating available in Annapolis Junction, Maryland; Washington, DC; or Reston, Virginia. Compensation depends on the applicable Labor Category and factors including education, experience, certifications, and other qualifications.

Requirements

• Active TS/SCI security clearance with an active polygraph.
• Current Security+ certification or equivalent IAT Level II/III certification.
• Proficiency with XACTA and the Risk Management Framework (RMF), including management of IATT and ATO processes.
• Proficiency with Splunk.
• Experience assessing existing IT architectures against applicable security frameworks, including ICD 503.
• Experience implementing and maintaining system security documentation, including SSPs, Security Assessment Plans (SAPs), POA&Ms, and security assessment artifacts.
• Experience coordinating with ISSMs, Information System Security Engineers (ISSEs), system owners, and Authorizing Officials.
• 18 years of experience in security, cybersecurity, systems engineering, or a closely related field with comparable scope and responsibilities; a bachelor's degree may substitute for four years of experience, and a master's degree may substitute for six years of experience.
• Strong communication skills and ability to communicate complex cybersecurity concepts and strategies effectively.

Nice To Haves

• Previous experience as an ISSO or ISSE.
• Demonstrated success leading cybersecurity initiatives on significant or large-scale programs.
• Experience managing or coordinating cybersecurity teams.
• Experience engaging with customers, program leadership, engineers, and other technical stakeholders.

Responsibilities

• Conduct technical security assessments of computing environments and support cybersecurity initiatives.
• Ensure system security compliance, identify and manage risks, and support certification and authorization activities throughout the program lifecycle.
• Collaborate with application leads, system administrators, database administrators, developers, and testers to help assigned systems achieve and maintain ATO.
• Provide security guidance to development and engineering teams to incorporate security compliance into system design and development.
• Support security assessment events and respond to questions and findings from ISSMs and Security Control Assessors (SCAs).
• Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other required security documentation using XACTA.
• Coordinate IATT and ATO activities with cybersecurity stakeholders and Authorizing Officials (AOs).
• Implement and validate NIST SP 800-53 security controls in cloud-native DPaaS environments.
• Apply Zero Trust security principles to data services, including identity management, segmentation, and flow control.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed