> Markdown version of [/jobs/ext/2694272-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/2694272-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer - **Company:** Core One - **Location:** McLean, VA, United States - **Experience:** Expert - **Salary:** $150,000.0 - $250,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Computer Engineering, Data Security, Information Security Management, Internet Security, Information Systems Security Architecture Professional, Server Administration, Software Engineering, SARS Software Products, Information Technology, Nessus, Vulnerability Analysis - **Published:** September 3, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-information-system-security-officer-mclean-va--2f1d4f43-3970-4905-9dba-f49d52f2cb1d ## About the Role * Bachelor's Degree, or more advanced degree, in Information Technology, Computer Science, Cybersecurity, Computer Engineering, or Information Systems or related field * 5+ years of cumulative experience spanning IT systems administration, cybersecurity compliance, IT system troubleshooting, and incident * 6+ years of experience in a role such as Information Systems Security Engineer (ISSE), accrediting Sponsor programs * Experience with completing new system(s) authorization and accreditation through the Sponsor's Authorization and Accreditation (A&A) processes, procedures, security requirements, and systems (e.g. Greenlight) * Experience using the Sponsor's A&A process to accredit systems built on C2E or C2S Amazon Web Services * Experience in security policy, counterintelligence, and security controls * TS/SCI w/ Poly Clearance Desired Qualifications: * Certified in AWS or equivalent cloud technology * Security+, Certified Information System Security * Professional (CISSP), Certified Information Security * Manager (CISM), or equivalent Salary Range: $150,000 - $250,000 The pay range reflected above is a general guideline for this position and labor category and is not a guarantee of a specific salary or offer. Final compensation is determined based on factors including, but not limited to, relevant experience, education, certifications, security clearance level, contract requirements, geographic location, and internal pay equity, and may reflect market data specific to the awarded contract., Amazon Web Services (AWS), CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cloud Computing, Communication Skills, CompTIA Security+, Compensation Management, Computer Engineering, Computer Science, Computer Security, Documentation, FISMA - Federal Information Security Management Act, Federal Compliance Regulations, Incident Response, Information Systems Security Engineering (ISSE), Information Systems/Technology IS/IT Administration, Information Technology & Information Systems, Information/Data Security (InfoSec), Integrated Circuits (ICs), International Classification of Diseases (ICD), Internet Security, Leadership, Maintain Compliance, Nessus, Operational Audit, Regulatory Compliance, Risk Analysis, Security Analysis, Security Policy, Sensitive Compartmented Information (SCI), Software Administration, Software Development, Systems Administration/Management, Team Player, Top Secret Clearance, Training/Teaching, U.S. ## Description The Senior Information System Security Officer is responsible for implementing and maintaining cybersecurity controls, ensuring compliance with federal regulations, and guiding information systems through the Customer's A&A process. This role requires a deep understanding of federal cybersecurity standards, proactive engagement with stakeholders, and the ability to operate independently in a fast-paced environment., * Lead and execute activities across all RMF phases (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor). * Develop, review, and maintain accreditation artifacts including System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessments, and POA&Ms. * Monitor compliance with NIST 800-53, 800-171, ICD 503, FedRAMP, FISMA, and agency-specific policies. Prepare for and support audits, inspections, and assessments. * Conduct vulnerability scanning, compliance checks, risk assessments, and remediation tracking using tools such as Nessus or Tenable.sc. * Create and maintain security documentation, continuous monitoring strategies, incident response plans, and compliance reports. Provide briefings and status updates to leadership and Authorizing Officials. * Collaborate with system owners, engineers, and developers to ensure security is integrated into design, development, and operations. * Support investigation, response, and remediation of security incidents. * Manage account recertifications, access reviews, and deliver security awareness training at the system level. * Serve as the primary cybersecurity point of contact for assigned systems, ensuring clear communication with internal and external stakeholders. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [IT Salaries in Austria](https://www.wearedevelopers.com/magazine/286-it-salaries-in-austria)