> Markdown version of [/jobs/ext/2011127-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/2011127-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer (ISSO)

- **Company:** Westway Services Group LLC
- **Location:** Aurora, CO, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, System Configuration, Security Information and Event Management, Vulnerability Analysis
- **Published:** August 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9084477/information-systems-security-officer-isso

## About the Role

We are looking for someone who is technically strong, detail-oriented, proactive, and comfortable working independently in a highly regulated environment., * Security+ or higher certification meeting applicable DoD requirements.

 * Working knowledge of NIST SP 800-53, RMF, and ICD 503.
 * Experience with vulnerability scanning, HBSS, and SIEM/security monitoring tools.
 * Strong documentation, organizational, and problem-solving skills.
 * Ability to work independently and collaborate in a mission-focused environment.

Preferred: CISSP, CISM, or other advanced cybersecurity certification; NRO and/or CIA experience.

Security Requirements

 * Active TS/SCI clearance with current CI Polygraph required.
 * U.S. Citizenship required to meet applicable government and program requirements.
 * Must maintain required clearance and program access.
 * Successful completion of applicable background and security checks required.

Travel

 * Up to 20%, as required to support customer requirements, security inspections, audits, and Virginia facilities.

## Description

Westway is seeking an Information Systems Security Officer (ISSO) to support classified information systems in Aurora, Colorado. You'll play a key role in protecting classified systems, maintaining security compliance, and supporting cybersecurity operations within a SCIF., * Serve as the ISSO for classified systems within a SCIF.

 * Maintain compliance with NIST SP 800-53, ICD 503, RMF, and applicable government requirements.
 * Manage security controls, SSPs, and accreditation documentation.
 * Conduct vulnerability scans, system audits, and continuous monitoring.
 * Monitor and support investigation and reporting of security incidents.
 * Maintain system configuration and security baselines.
 * Support government and customer security inspections and assessments.
 * Ensure users meet access, need-to-know, and security training requirements.
 * Work closely with the ISSM, System Administrators, and Program Management to maintain system security and compliance., Westway Services Group LLC maintains a drug-free workplace and performs pre-employment reference checks, clearance checks, and post-offer background checks, where permitted by law.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Enterprise Linux as Container Images](https://www.wearedevelopers.com/videos/1610-enterprise-linux-as-container-images)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)