Information Systems Security Officer

Requisition ID: 3616

• Standard Title:
• Required Security Clearance: Top Secret/SCI with Full Scope Polygraph
• Location: Annapolis Junction, MD
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

• Ensure system compliance with federal, DoD, and IC cybersecurity regulations and standards, including NIST, ICD 503, CNSS, and RMF.
• Maintain and update security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and Continuous Monitoring Plans.
• Coordinate and support security assessments, audits, and inspections by internal and external stakeholders.
• Conduct risk assessments and vulnerability analysis, providing recommendations for mitigating identified risks.
• Facilitate and oversee system authorization activities in accordance with the Risk Management Framework (RMF) process.
• Monitor and report on system security posture, incident response, and remediation efforts.
• Collaborate with Information Systems Security Engineers (ISSEs), system administrators, and program managers to integrate security requirements into system lifecycle.
• Provide security awareness training to system users and enforce proper security practices.
• Act as a liaison between the organization and government customers, ensuring timely communication of security updates and issues.

• Experience with security frameworks and policies: NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs, FISMA, FedRAMP.
• Experience managing security documentation: SSPs, POA&Ms, Security Controls Assessment (SCA) artifacts, SARs, SCTM.
• Experience with security tools such as ACAS, Nessus, Splunk, HBSS, eMASS, Xacta.
• Knowledge of security technologies: Firewalls, SIEMs, VPNs, IDS/IPS, DLP, PKI, Multi-Factor Authentication.
• Experience with operating systems: Windows, Linux, Unix, macOS.
• Experience with Cloud environments (AWS, Azure, Google Cloud) and cloud security controls.
• Familiarity with vulnerability scanning, security testing, and incident response processes.
• Experience with collaboration tools like JIRA, Confluence, ServiceNow.
• Strong knowledge of system authorization process, audit support, and compliance reporting.
• Security certifications such as CISSP, CAP, Security+, CISM, CEH, AWS Security Specialty.

• Not specified.

• None specified.

• CISSP
• CAP
• Security+
• CISM
• CEH
• AWS Security Specialty

• Active Top Secret/SCI with Full Scope Polygraph

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).