> Markdown version of [/jobs/ext/146087-lead-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/146087-lead-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Information System Security Officer (ISSO) - **Company:** BAE Systems - **Location:** John C. Stennis Space Center, MS, United States - **Experience:** Expert - **Salary:** $96,623.0 - $164,259.0 - **Contract:** Permanent contract - **Skills:** Xacta, Microsoft Windows, Data Analysis, Cyber Security, Information Systems, Linux, Identity and Access Management, Information Security Management, Zero Trust Network Access, Information Technology, Tenable Nessus, Splunk - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ce2bf07934b27bfb ## About the Role The candidate must hold an IAM/IAT Level II (or higher) (8570.01) compliant certification (i.e. CAP, Security+ CE, CISSP, CASP, CISM, GSLC). Required Education & Experience: Typically a Bachelor's degree and 6+ years' work experience in cybersecurity and or equivalent years/experience. A qualified candidate for this position must have the ability to: * Familiarity with the RMF process * Understanding of NIST 800 series, DoD 8500.2, DoDD 8570, CNSSI 1253, NISPOM Chapter 8, and related publications * Experience implementing and monitoring technical, administrative, and operational security controls * Experience performing risk assessment and risk management for unclassified and classified IT systems * Communicate clearly and concisely verbally and in writing * Experience with Splunk, especially for data analysis * Work as part of a team and independently without direct supervision Preferred Education, Experience, & Skills * Familiarity with the DCSA eMass system and/or other documentation process tools such as Xacta * Familiarity with MS and Linux Operating Systems and associated DISA STIGS * Reviewing security event logs from both Windows and Linux systems * Use of network/system scanning tools and interpreting results * Security incident management * Working with hardware and software vendors * Prior experience in any security related domain, Technical, Physical, or Personnel ## Description BAE Systems is seeking an an Information System Security Officer (ISSO) to join our team supporting the Department of War (DoW) High Performance Computing (HPC) Modernization Program (DoD HPCMP) and U.S. Navy DoW Supercomputing Resource Center (DSRC) located at the John C. Stennis Space Center, MS. The ISSO role is responsible for applying Information System (IS) security principles, procedures, and practices under the Risk Management Framework (RMF). As an ISSO you are responsible for implementing security controls, monitoring system security posture, auditing user activity, maintaining records, and updating documentation. Your work will ensure classified information systems maintain compliance with applicable security regulations, such as CNSSI, NIST, and NISPOM. The ISSO's role at the Navy DSRC includes: * + Supporting the Information Systems Security Manager (ISSM) at the DSRC and the program's CSSP. + Providing support in the creation and maintenance of all Assessment and Authorization (A&A) packages under the RMF guidelines utilizing the Enterprise Mission Assurance Support Service (eMASS) tool. This support includes, but is not limited to, clear understanding of eMASS tool, review and make recommendations for supporting documentation supporting the RMF Control/AP responses and if requested by the ISSM, perform the role Initial Task Validator of RMF Controls. + Ensuring DoDD 8570 compliance regarding baseline and Computing Environment, which are required for cybersecurity Technical Personnel, certifications for all applicable staff under the purview of the DSRC. + Management of BAE Systems staff. Specific Responsibilities * Protect information systems and data from threats and vulnerabilities * Create and maintain system security documentation * Implement, maintain, and monitor security controls * Provide security status to the DSRC leadership on a recurring basis * Achieve and maintain Authorization to Operate Unclassified and Classified information systems * Assess and mitigate threats and vulnerabilities * Provide security related guidance and technical support to the Navy DSRC staff * Maintain and report the status of all Plan of Action and Milestones * Attend recurring ISSO meetings across the program * Lead the implementation of critical security projects, such as Zero Trust and Data Exfiltration * Assist the ISSO's at the other DSRCs * Maintain eligibility for personnel security clearance * Perform other duties as assigned ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)