> Markdown version of [/jobs/ext/2547067-information-systems-security-officer-isso-chantilly-va](https://www.wearedevelopers.com/jobs/ext/2547067-information-systems-security-officer-isso-chantilly-va). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer (ISSO) - Chantilly, VA - **Company:** ICR LLC - **Location:** Chantilly, VA, United States (Remote available) - **Experience:** Experienced - **Salary:** $120,000.0 - $145,000.0 - **Contract:** Permanent contract - **Skills:** Xacta, Configuration Management, Cyber Security, Information Systems, Databases, Firmware, Identity and Access Management, Intrusion Detection Systems, Network Switches, Network Routers, Firewalls (Computer Science), Operating System Security, Network Server, Servicenow, Plan of Action and Milestones - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9ef20e517c1999e4 ## About the Role * Current TS/SCI within the last five years with polygraph * DoD 8570/8140 IAM II/IAT II certification or higher * Knowledgeable of multiple vendor operating systems security requirements * Hands-on experience with industry standard Information Assurance tools * Experience with obtaining and maintaining system ATOs leveraging the RMF process * Hands on auditing and investigation experience Desired Skills: * Hands on experience with ICD 503/JSIG/DAAPM * Experience working in environment supporting IC and/or DoD customers * Experience implementing new and complex technologies at multiple classification levels within large enterprise environments * Experience with RMF database repositories (eMass, ServiceNow, Xacta) * Ability to understand information systems equipment configurations (switches, routers, IDS, firewalls, servers, storage arrays, etc.) * Preferred Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 2 years of professional experience ## Description * Oversee day-to-day information system (IS) security operations including hardware and software implementations * Carry out technical administration of IS in accordance with internal ICR and customer security requirements, primarily Risk Management Framework (RMF) * Weekly audit reviews of information systems * Team member to assist with data transfers * Upkeep, monitor, analyze, and respond to network and security events * Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame * Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan * Ensure configuration management (CM) for security relevant IS software, hardware, and firmware is maintained and documented in accordance with baseline * Ensure all security-related information system documentation is current and accessible to properly authorized individuals * Ensure records are maintained for workstations, software, servers, routers, firewalls, network switches, telephony equipment, etc. throughout the information system's life cycle * Evaluate proposed changes or additions to the information system, and advise the ISSM of their security relevance * Assist and conduct security IS education * Participate in internal/external security audits/inspections; perform risk assessments * Inform ISSM on technical IS security matters * Assist in conduct of investigations into computer security violations and incidents, reporting as necessary to both the Contractor Program Security Officer (CPSO) and Program Managers * Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered * Communicate, implement and manage a formal Information Security / Information Systems Security Program together with ISSM and CPSO * Implement and enforce Information Security Policies and Procedures together with ISSM and CPSO * Review and oversee RMF Package authorizations together with ISSM and CPSO ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)