> Markdown version of [/jobs/ext/1275503-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/1275503-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer - **Company:** TEKSYSTEMS INC. - **Location:** Ridgecrest, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Configuration Management, Cyber Security, Information Systems, Databases, Linux, Identity and Access Management, Information Security Management, Networking Hardware, SARS Software Products, SC Clearance, Information Technology, Devsecops, Vulnerability Analysis - **Published:** July 15, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9032556/information-systems-security-officer ## About the Role Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience). 5+ years of experience in information assurance, cybersecurity, or system security roles within a DoD environment. Demonstrated experience as an ISSO supporting RMF-authorized systems. Strong understanding of: DoD RMF NIST 800-series publications STIG implementation and compliance Experience using tools such as eMASS, ACAS scanners, and configuration compliance tools. Active Secret clearance and U.S. citizenship., Experience supporting Navy or DoD RDT&E programs, labs, or test environments (China Lake experience a plus). Familiarity with classified systems and air-gapped networks. Experience supporting Linux and/or Windows-based systems from a security perspective. Knowledge of virtualization, containers, or DevSecOps environments in a secure context. IAM Level II or higher certification in accordance with DoD 8140/8570, such as: Security+ CE CISSP CASP+ CISM Strong written and verbal communication skills for technical documentation and customer interaction. Core Competencies Attention to detail and compliance discipline Risk identification and mitigation mindset Ability to work independently in secure environments Effective collaboration with technical and non-technical stakeholders Professional judgment in classified and regulated programs Work Environment On-site work at NAWS China Lake in a secure government facility May require occasional extended hours during assessments, audits, or system authorizations Ability to lift up to ~25 lbs of equipment as needed ## Description We are seeking an experienced Information System Security Officer (ISSO) to support mission-critical Navy programs at NAWS China Lake. The ISSO will be responsible for implementing, maintaining, and enforcing cybersecurity controls for one or more information systems operating within classified and unclassified environments. This role works closely with System Administrators, Information System Security Managers (ISSMs), engineers, and government stakeholders to ensure systems comply with DoD Risk Management Framework (RMF) and Navy cybersecurity requirements throughout the system lifecycle. This position is well suited for a detail-oriented cybersecurity professional who understands secure system operations in laboratory, development, test, and operational environments., Serve as the ISSO for assigned information systems, ensuring compliance with DoD and Navy cybersecurity policies. Implement, assess, and maintain security controls in accordance with DoDI 8510.01, NIST SP 800-53, and Navy-specific guidance. Support all phases of the RMF lifecycle: Categorize, Select, Implement, Assess, Authorize, and Monitor. Assist the ISSM in preparing and maintaining Authorization to Operate (ATO) and Authority to Connect (ATC) packages. Security Documentation & Compliance Develop, update, and maintain RMF documentation including: System Security Plans (SSPs) Security Assessment Reports (SARs) Plans of Action and Milestones (POA&Ms) Continuous monitoring artifacts Track and remediate vulnerabilities identified through ACAS scans, STIG findings, and audits. Ensure proper configuration management and documentation discipline for system changes. Technical Security Implementation Apply and validate Security Technical Implementation Guides (STIGs) for operating systems, applications, databases, and network devices. Coordinate with system administrators and engineers to ensure secure configurations are implemented without impacting mission effectiveness. Monitor system security posture and assist with incident response and reporting as required. Continuous Monitoring & Sustainment Perform ongoing security assessments, vulnerability analysis, and control effectiveness reviews. Support periodic reassessments, annual reviews, and change-driven security impacts. Assist with cybersecurity compliance during system upgrades, patches, and integration efforts. Stakeholder Coordination Interface with ISSMs, Authorizing Officials (AOs), System Owners, Network Teams, and Program Offices. Support inspections, assessments, and cybersecurity audits conducted by government authorities. Provide cybersecurity guidance to engineers and program staff to ensure security is integrated early and effectively. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)