Sr. Information Systems Security Officer

Tyto Athene, LLC•Wright-Patterson AFB, OH

6d•$125,000 - $135,000•Onsite

About The Position

Tyto Athene is searching for a Senior Information Systems Security Officer (ISSO) to support the National Space Intelligence Center (NSIC) in a Special Access Program (SAP) environment. The Senior ISSO will serve as the primary cybersecurity lead for SAP systems, supporting system authorization, continuous monitoring, and risk management activities in accordance with ICD 503 and DoD cybersecurity requirements. This role also serves as the team lead for a four-person IT Support Center.

Requirements

10+ years of experience in an ISSO, Information Security Engineer, or similar role in a DoD, IC, or SAP environment, degree substitutions apply
Demonstrated experience supporting SAP or SCI systems through ATO and reauthorization cycles.
Strong knowledge of RMF, ICD 503, NIST SP 800-53, and DISA STIGs.
Experience developing and managing ATO and RMF documentation (SSPs, SARs, POA&Ms).
Hands-on experience with tools such as ACAS, HBSS, Splunk, Nessus, or SIEM solutions.
DoD 8570/8140 IAM Level III or IAT Level II/III certification (e.g., CISSP, CISM, Security+).
U.S. Citizenship required.
Ability to work onsite in a classified environment.

Nice To Haves

Experience supporting Air Force, DoD, or Intelligence Community programs.
Familiarity with SAP security policy and authorization processes.
Knowledge of Zero Trust Architecture or modern cybersecurity practices.
Scripting or automation experience (Python, PowerShell).

Responsibilities

Serve as the primary cybersecurity lead for SAP information systems, ensuring compliance with ICD 503, NIST RMF, and applicable DoD security policies.
Lead security authorization activities for SAP systems, including preparation and maintenance of SAP ATO packages using program-specific processes (non-eMASS).
Develop and maintain RMF and SAP security documentation, including SSPs, SARs, and POA&Ms.
Conduct and support security control assessments, vulnerability scanning, and continuous monitoring activities.
Coordinate with Authorizing Officials, Program Security Officers, SCAs, system administrators, and engineers to manage risk and maintain system authorization.
Lead security testing, audits, and compliance reviews to sustain SAP ATOs.
Provide cybersecurity guidance and security awareness training to system users.
Oversee day-to-day operations of the IT Support Center and support incident response activities.