> Markdown version of [/jobs/ext/2712020-senior-information-systems-security-officer-ts-sci](https://www.wearedevelopers.com/jobs/ext/2712020-senior-information-systems-security-officer-ts-sci). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Systems Security Officer (TS/SCI)

- **Company:** Zachary Piper
- **Location:** Linthicum Heights, MD, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $160,000.0
- **Contract:** Contract
- **Skills:** Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Zero Trust Network Access, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 4, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9142901/senior-information-systems-security-officer-tssci

## About the Role

* Bachelors degree and 8+ years of experience supporting cybersecurity programs
 * Active Top Secret w/ SCI eligibility
 * Certifications: IAT III (CISSP, CISM, CASP+, CCSP, etc.)
 * Experience managing multiple RMF authorization packages
 * Experience briefing Government leadership and preparing documentation
 * Experience implementing Zero Trust architecture and cloud security

## Description

* Serve as a Cybersecurity Policy Analyst responsible for reviewing, updating, and maintaining DC3 Standard Operating Procedures (SOPs).
 * Execute all RMF phases, including Prepare, Categorize, Select, Implement, Assess, Authorize, and Continuous Monitoring.
 * Support systems in obtaining and maintaining Authorization to Operate (ATO) approvals.
 * Develop and maintain security documentation, including SSPs, SAPs, POA&Ms, CMPs, Contingency Plans, and Incident Response Plans.
 * Utilize eMASS to manage authorization packages, security artifacts, workflows, compliance activities, and POA&M tracking.
 * Perform Security Impact Analyses (SIAs) to evaluate system changes and ensure continued compliance.
 * Conduct vulnerability assessments, review scan results and STIG findings, and coordinate remediation efforts with system administrators and engineering teams.
 * Create, track, and manage POA&Ms to address vulnerabilities and compliance gaps.
 * Support Information System Continuous Monitoring (ISCM) activities for Microsoft Azure cloud and on-premises environments.
 * Advise system owners and stakeholders on cybersecurity requirements, risk management, and authorization strategies.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)

## Related Articles

- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)