> Markdown version of [/jobs/ext/1353230-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/1353230-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer

- **Company:** Dezign Concepts LLC
- **Location:** Bethesda, MD, United States
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cyber Security, System Configuration, Linux, Hypervisor, Information Technology Security Auditing, Enterprise Software Applications
- **Published:** July 20, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9041783/information-systems-security-officer

## About the Role

* Citizenship: Must Be a US Citizen
 * Existing Clearance Required: Active Top Secret SCI with Poly
 * Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.
 * Demonstrated experience with security in the Amazon Web Services environment.
 * Demonstrated experience performing complex technical tasks in pursuit of overall goals with minimal direction.
 * Demonstrated experience in translating an understanding of systems and applications into security test plans and perform hands on security testing.
 * Demonstrated knowledge of risk management methodologies.
 * Demonstrated experience to analyze test results and suggest mitigations for security problems.
 * Demonstrated technical experiences with system configuration, development, and design specifically around enterprise systems and hypervisors.
 * Demonstrated experience with Linux and virtual platforms.
 * Documented working experience with public and private information security groups and organizations.
 * Possesses experience with communicating vulnerability results and risk posture to senior executives.
 * Possess a broad knowledge of Information Security policies and guidance, as well as the ability to assist in researching, evaluating, and developing relevant security policies and guidance

## Description

* Provide expert-level knowledge, both in context and execution with the Risk Management Framework to support a NIST SP 800-53 HHM systems through the A&A process.
 * Construct thorough and complete security documentation to include, but not limited to, System Security Plans (SSPs), Plan of Actions and Milestones (POA&Ms), and any other artifacts to support the Body of Evidence (BOE), for sponsor's approval.
 * Identify security controls and work with engineering, development and testing staff to construct proper test plans and procedures.
 * Implement security audit reviews verifying that the audit records are collected and reviewed.
 * Coordinate all security testing exercises, working with external assessment teams and technical staff.
 * Configure and support various AWS services to protect the security posture of the system
*


## Related Videos

- [An alternative approach to digital sovereignty: Confidential Computing](https://www.wearedevelopers.com/videos/100043-an-alternative-approach-to-digital-sovereignty-confidential-computing)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [20 Years of Solving Unsolvable Problems](https://www.wearedevelopers.com/videos/100214-20-years-of-solving-unsolvable-problems)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)