> Markdown version of [/jobs/ext/2402896-sr-information-systems-security-officer-isso-advisor-ts-sci-w-poly](https://www.wearedevelopers.com/jobs/ext/2402896-sr-information-systems-security-officer-isso-advisor-ts-sci-w-poly). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Information Systems Security Officer (ISSO), Advisor - TS/SCI w/poly - **Company:** Peraton Inc - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $146,000.0 - $234,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Unix, Cascading Style Sheets (CSS), Configuration Management, Cyber Security, Information Systems, Databases, Linux, Web Servers, Information Security Management, Intrusion Detection and Prevention, Nmap, Software Engineering, Data Streaming, Systems Architecture, TCP/IP, HP WebInspect, Computer Network Technologies, Firewalls (Computer Science), Information Technology, Tenable Nessus, Splunk, Plan of Action and Milestones - **Published:** August 21, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88097036/1 ## About the Role * Bachelor's degree in Computer Science, Business Management, or IT related discipline. * Minimum of 9 years of work experience in a Computer Science or Cybersecurity related field with at least 7 of those years serving as an Information Systems Security Officer (ISSO) or Information System Security Engineer at a cleared facility. * Must have at least 1 of the following certifications OR advanced degree from the list below: + CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC OR + Doctorate - Computer Science + Doctorate - Cybersecurity + Doctorate - Data Science + Doctorate - Information Systems + Doctorate - Information Technology + Doctorate - Software Engineering + Master of Science - Strategic Information and Cyberspace Studies (NDU CIC) + Masters - Computer Science + Masters - Cybersecurity + Masters - Data Science + Masters - Information Systems + Masters - Information Technology + Masters - Software Engineering * Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), and/or similar applications. * Active TS/SCI security clearance with the ability to obtain a polygraph. ## Description Apply best practices for cybersecurity program standards, processes, procedures, and industry-standard security frameworks. * Implement and assess security controls in accordance with NIST SP 800-53, NIST SP 800-53A, AFPD 17-1, and AFI 17-130 requirements and guidance. * Develop security policies and procedures, CSS, SSP, SSPP, and assess ATO package artifacts. * Apply expert knowledge of Risk Management Framework (RMF) v5 processes and workflows. * Use eMASS to execute RMF v5 activities, document and update system status, identify and manage operational and technical security controls, assess implementation and risk, manage non-compliant and non-validated controls, manage POA&Ms from entry through closeout, produce reports, and track POA&M due dates. * Complete checklists to ensure Security Authorization Process documentation is complete and complies with applicable guidance. * Collaborate with IT counterparts, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers. * Conduct risk assessments, monitor security incidents, and respond appropriately to security threats. * Apply knowledge of network technologies and protocols, TCP/IP, operating systems, security protocols, system architecture and data flows, security categorization, requirements, configuration management processes, firewalls and configurations, intrusion detection and prevention systems, encryption techniques, Windows, Unix, Linux, databases, web servers, and other applications. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)