> Markdown version of [/jobs/ext/2583933-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/2583933-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer (ISSO) - **Company:** Leidos, Inc. - **Location:** Lorton, VA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cloud Computing, Cyber Security, Information Systems, Information Security Management, Intrusion Detection Systems, Network Security, Security Information and Event Management, Firewalls (Computer Science), Vulnerability Analysis - **Published:** August 11, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/information-system-security-officer-isso-lorton-va-usa-58917291 ## About the Role the and security audits with remediation guidance * Manage continuous monitoring of security controls for classified and unclassified data * Coordinate with cross-functional teams to implement security protocols and best practices * Ensure RMF accreditation is completed and maintained * Act as primary security contact for incident response and reporting * Provide security training and awareness for personnel operating DoD systems * Maintain security documentation (SSPs, risk assessments, POA&Ms) and stay updated on threats Tasks * Active Top Secret clearance with ability to obtain SCI before start date * Bachelor's degree with 4+ years of experience or Master's with 2+ years (experience may substitute for degree) * Deep knowledge of DoD cybersecurity policies and frameworks (NIST 800-53, RMF, FISMA, ICD 503/705, JSIG, DAAPM) * Experience with cloud computing and achieving/maintaining ATO for cloud-based systems * DoD 8140 Intermediate certification (e.g., Cloud+, Security+) * Experience in system security engineering, risk management, and vulnerability assessments * Strong understanding of network security, controls, and tools (firewalls, IDS/IPS, SIEM, EPP) * Ability to work independently and with cross-functional teams * Strong written and verbal communication for security reporting * Interest in continuous cybersecurity learning Key requirements * ## Description Experteer Overview In this role you will safeguard DoD information systems by leading cybersecurity posture, policy development, and RMF-based accreditation. You will work closely with the ISSM and cross-functional teams to implement security controls, perform risk assessments, and sustain continuous monitoring to protect data confidentiality, integrity, and availability. The position emphasizes hands-on technical work, incident response support, and ongoing compliance with DoD standards in a fast-paced environment. This is a locally-based, on-site role focused on delivering mission-critical cyber security for Air Force lifecycle programs. Compensation / Benefits * Collaborate daily with the ISSM to provide cybersecurity guidance * Develop and maintain security policies, procedures, and documentation for DoD standards (NIST, RMF, FISMA, JSIG) * Oversee cybersecurity posture of DoD information systems ensuring CIS requirements are met * Perform risk assessments, vulnerability assessments, and security audits with remediation guidance * Manage continuous monitoring of security controls for classified and unclassified data * Coordinate with cross-functional teams to implement security protocols and best practices * Ensure RMF accreditation is completed and maintained * Act as primary security contact for incident response and reporting * Provide security training and awareness for personnel operating DoD systems * Maintain security documentation (SSPs, risk assessments, POA&Ms) and stay updated on threats Tasks * Active Top Secret clearance with ability to obtain SCI before start date * Bachelor's degree with 4+ years of experience or Master's with 2+ years (experience may substitute for degree) * Deep knowledge of DoD cybersecurity policies and frameworks (NIST 800-53, RMF, FISMA, ICD 503/705, JSIG, DAAPM) * Experience with cloud computing and achieving/maintaining ATO for cloud-based systems * DoD 8140 Intermediate certification (e.g., Cloud+, Security+) * Experience in system security engineering, risk management, and vulnerability assessments * Strong understanding of network security, controls, and tools (firewalls, IDS/IPS, SIEM, EPP) * Ability to work independently and with cross-functional teams * Strong written and verbal communication for security reporting * Interest in continuous cybersecurity learning Key requirements * ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)