> Markdown version of [/jobs/ext/1834985-information-system-security-officer-mid](https://www.wearedevelopers.com/jobs/ext/1834985-information-system-security-officer-mid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer - Mid - **Company:** Caci Inc - **Location:** Washington, DC, United States - **Experience:** Experienced - **Salary:** $90,300.0 - $189,600.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Configuration Management, Cyber Security, Information Systems, Information Security Management, Smartsuite, Requirements Traceability, Security Software, Software Asset Management, Software Vulnerability Management, Scripting, Information Technology, Vulnerability Analysis - **Published:** July 10, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9022059/information-system-security-officer-mid ## About the Role U.S. Citizenship required - Active Secret security clearance required - FEMA EOD suitability or Current DHS or FEMA EOD preferred - BS/BA + 10 years of applicable experience or equivalent combination - Must have one of the following Information Assurance Technician (IAT) Level III qualifications: - Certified Information System Security Professional (CISSP) - Certified Information Security Manager (CISM) - CompTIA Advanced Security Practitioner (CASP+) - Minimum 5 years of experience in information security - Demonstrated expertise in RMF, Information Security processes, FISMA, NIST SP 800-37, NIST SP 800-53 - Experience developing security documentation including SSPs, POA&Ms, and Contingency Plans - Knowledge of DHS 4300 Series and federal cybersecurity requirements - Experience with continuous monitoring and vulnerability management Desired: - Previous DHS or DoD experience - Experience with CSAM, RegScale, eMASS, or similar GRC tools - Cloud security experience with AWS, Azure, or other platforms - Knowledge of FedRAMP and cloud authorization processes - Experience with automated security tools and scripting - Strong technical writing and communication skills ## Description CACI is searching for an Information System Security Officer - Mid to support the FEMA Office of the Chief Information Security Officer (OCISO) in Washington, D.C. As an Intermediate ISSO, you will play a crucial role in ensuring the security and compliance of FEMA's information systems. You will work in a dynamic environment, collaborating with Lead ISSOs, IT system owners, stakeholders, and cybersecurity professionals to implement and maintain robust security controls. Your efforts will directly contribute to safeguarding FEMA's mission-critical systems and data. The Intermediate ISSO will be responsible for technical cybersecurity efforts in coordination with Lead ISSOs, providing direct support to the Compliance Branch Lead. Serving as a point of contact for technical cybersecurity matters related to quantifying technical risk, the Intermediate ISSO will execute Risk Management Framework activities for ATO decisions, ensure confidentiality, integrity, and availability of FEMA Information Systems, and implement security controls throughout the system lifecycle. This position requires maintaining a security posture in compliance with FISMA, DHS 4300 Series, NIST, and DHS and Component Directives. The ISSO - Mid will execute Risk Management Framework activities for ATO decisions and ensure systems meet compliance requirements while ensuring confidentiality, integrity, and availability of FEMA Information Systems through proper security control implementation. This position requires implementing security controls and conducting system assessments to identify vulnerabilities and gaps, as well as developing and maintaining System Security Plans, Configuration Management Plans, and Contingency Plans. The ISSO - Mid will conduct Security Impact Analyses and test configuration changes pre- and post-deployment, support continuous monitoring of IT systems, and develop and track POA&Ms for identified vulnerabilities. Responsibilities include developing security requirement traceability matrices and managing hardware and software inventory lists, supporting cloud security initiatives, and participating in Change Advisory Board (CAB) reviews. The position involves conducting technical vulnerability assessments, providing audit support documentation, and responding to cybersecurity data calls with timely information to leadership. Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating POA&Ms within 0 to 15 days after vulnerability identification, and updating System Security Plans, Configuration Management Plans, and Contingency Plans annually or when changes occur. The Intermediate ISSO will conduct Security Impact Analysis Reports within 5 business days after change notification, analyze Risk Assessment Reports and FISMA Scorecard Analysis on a daily basis, and produce Weekly Activity Reports and Monthly Program Reports. This position requires following the Information Systems Security Officer (ISSO) Guide when developing, updating, or reviewing required security artifacts and tracking and suggesting technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)