> Markdown version of [/jobs/ext/1791867-information-system-security-officer-ii](https://www.wearedevelopers.com/jobs/ext/1791867-information-system-security-officer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer II

- **Company:** Stratum Networks
- **Location:** Annapolis Junction, MD, United States
- **Contract:** Permanent contract
- **Skills:** Cascading Style Sheets (CSS), Configuration Management, Communications Protocols, Cyber Security, Information Systems, Dynamic Multipoint Virtual Private Networks, Firmware, Identity and Access Management, Information Security Management, Software Requirements Analysis, Software Security, Firewalls (Computer Science), Information Technology
- **Published:** July 23, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4a8eb8ed8a247d8f

## About the Role

* TS/SCI with Polygraph.
 * Ten (10) years' experience as an ISSO on programs and contracts of similar scope, type, and complexity is required.
 * Experience must include at least two (2) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools.
 * Bachelor's degree in Computer Science or related discipline from an accredited college or university is required. Four (4) years of additional ISSO experience may be substituted for a bachelor's degree.
 * DoD 8570 compliance with Information Assurance Management (IAM) Level 1 or higher is required.
 * Security + Certification required.
 * Experience in at least one (1) of the following is required: DMVPN, Blue Coat product line, ASAs, HPNA, or General Firewalls.

## Description

As our ISSO II, you will provide support for a program, organization, system, or enclave's information assurance program. Day-to-day responsibilities could include:

 * Propose, coordinate, implement and enforce information systems security policies, standards and methodologies.
 * Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
 * Assist with the management of security aspects of the information system and perform day-to-day security operations of the system.
 * Evaluate security solutions to ensure they meet security requirements for processing classified information.
 * Perform vulnerability/risk assessment analysis to support certification and accreditation.
 * Provide configuration management (CM) for information system security software, hardware, and firmware.
 * Manage changes to system and assess the security impact of those changes.
 * Prepare and review documentation, to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
 * Support security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP).


## Related Videos

- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)