> Markdown version of [/jobs/ext/1150432-isso](https://www.wearedevelopers.com/jobs/ext/1150432-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSO

- **Company:** Draper, Inc.
- **Location:** Cambridge, MA, United States
- **Contract:** Permanent contract
- **Skills:** Systems Engineering, Information Systems, System Configuration, Information Security Management, Security Information and Event Management, Software Vulnerability Management, Information Technology, Vulnerability Analysis
- **Published:** July 2, 2026
- **Apply:** https://www.clearancejobs.com/jobs/7685168/isso

## About the Role

* Experience in the areas of cybersecurity, compliance, systems engineering, or information technology.
 * Bachelor's degree in a related field (may substitute additional experience for education).
 * Has or able to obtain required DODM 8570.01-M baseline certification (e.g. CISSP) within 6 months of hire., * Experience using common vulnerability scanning and SIEM tools.
 * Previous experience as an ISSO or ISSE in a classified environment.
 * Previous experience implementing the requirements of the DCSA Assessment and Authorization Process Manual.

Security Requirement:

 * Current eligibility for a Secret personnel security clearance based on a T5 background investigation is required (in most cases this will mean the successful candidate will have current Top Secret eligibility).

## Description

Serves as an Information System Security Officer for a multitude of information systems. Performs technical audits of assigned information systems as well as periodic monitoring of compliance with established standards. Uses SIEM, vulnerability management, and other tools to actively correlate data and hunt threats. Ensures system is configured in accordance with required standards. Evaluates and creates artifacts which demonstrate system configuration, procedures, etc. Assist and educate users to ensure they operate the systems securely.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enterprise Linux as Container Images](https://www.wearedevelopers.com/videos/1610-enterprise-linux-as-container-images)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Model Based Systems Engineering in an Agile Product Development Process](https://www.wearedevelopers.com/videos/68-model-based-systems-engineering-in-an-agile-product-development-process)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Beyond Chat: AI Workflows That Actually Investigate Alerts (So You Don't Have To Know Everything)](https://www.wearedevelopers.com/videos/100308-beyond-chat-ai-workflows-that-actually-investigate-alerts-so-you-don-t-have-to-know-everything)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)