Senior Information Systems Security
About The Position
The Senior Information Systems Security Officer (ISSO) is responsible for overseeing and enhancing the security posture of enterprise information systems, ensuring strict compliance with federal regulations and organizational security policies. This role supports complex security programs and cloud‑hosted environments on AWS, requiring a seasoned professional with strong technical, analytical, and leadership capabilities. With a minimum of 8 years of experience, the Senior ISSO leads the development, implementation, and maintenance of Authorization to Operate (ATO) packages, conducts comprehensive risk assessments, manages vulnerability analyses, and coordinates incident response activities. The ISSO engages with internal and external stakeholders to maintain continuous compliance and fosters a culture of cybersecurity awareness across the organization.
Requirements
- Minimum 8 years of experience in information systems security, preferably in federal or defense environments
- Bachelor’s degree in Computer Science, Information Security, or a related field
- Excellent communication, leadership, and analytical skills
- U.S. Citizenship required
- Active Top Secret clearance required (or ability to obtain and maintain)
- Commitment to daily in‑office attendance in Washington, DC
Nice To Haves
- Professional certifications strongly preferred: CISSP, CISM, AWS Security Specialty
- Advanced knowledge of federal information security frameworks (NIST, FISMA, FedRAMP)
- Knowledge of AWS cloud services, including package management, IAM, encryption, configuration, and monitoring
- Proficiency with vulnerability management tools, SIEM platforms, and incident response technologies—Xacta preferred
- Strong understanding of network security concepts including firewalls, IDS/IPS, encryption, and endpoint protection
- Ability to analyze and interpret security logs, alerts, audit trails, and monitoring outputs
- Familiarity with secure software development practices and DevSecOps principles
Responsibilities
- Develop, implement, and maintain ATO packages by documenting security controls, conducting risk assessments, performing vulnerability analyses, and ensuring adherence to federal standards (NIST, FISMA, FedRAMP)
- Lead risk assessments and mitigation strategies for both on‑premises and AWS cloud environments
- Coordinate incident response, including analysis, reporting, remediation, and stakeholder communication
- Serve as liaison with internal stakeholders and external entities to ensure continuous compliance and audit readiness
- Oversee security awareness training initiatives to help cultivate a strong security culture
- Maintain detailed documentation for security controls, audits, system authorization artifacts, and remediation activities
Benefits
- Hands-on experience
- Certifications
- Industry training
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
