> Markdown version of [/jobs/ext/2717591-secret-cleared-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/2717591-secret-cleared-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Secret cleared Information System Security Officer

- **Company:** CareerCircle
- **Location:** Radnor, PA, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $87,100.0 - $157,450.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Artificial Intelligence, User Authentication, Microsoft Azure, Backbone.Js, Software as a Service, Cloud Computing, Cloud Computing Security, Configuration Management, Signals Intelligence, Communications Protocols, CompTIA Security+, Cyber Security, Information Systems, System Configuration, Linux, Infrastructure as a Service (IaaS), Identity and Access Management, Information Security Management, IT Management, Interoperability, Information Systems Security Architecture Professional, JavaScript Libraries, Key Management, Node.Js, Platform as a Service (PAAS), Security Content Automation Protocol, Software Vulnerability Management, Network Switches, Network Routing, Computer Network Operations, Software Security, SC Clearance, Information Technology, Nessus, National Industrial Security Program Operating Manual (NISPOM), Splunk, User Identification, Servicenow, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 4, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/all/all/2b9d2a50-1339-4df2-b80c-e7b4a2d411c7

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field. Additional years of experience will be considered in lieu of degree.
 * Must be U.S. Citizen
 * Must possess an active and current Secret clearance.
 * 5+ years of experience in cybersecurity, with at least 2-3 years specifically as an ISSO or similar security role.
 * Working knowledge of:
 + DoD RMF process and NIST SP 800-53 controls
 + Security Technical Implementation Guides (STIGs)
 + Vulnerability management tools (ACAS, Nessus, HBSS, Splunk, etc.)
 * Monitor and evaluate system compliance with information technology (IT) security, resilience, and dependability requirements.
 * Experience supporting and developing required artifacts for the ATO/authorization processes within the DoD environment.
 * 2+ years of documented experience cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).
 * DoD 8570/8140 IAT Level II or IAM Level I baseline certification (e.g., Security+ CE, CAP, CISM, CISSP).

Additional Qualifications/Certifications

 * TS/SCI clearance
 * Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
 * Experience with government cloud security environments ( GovCloud, Azure Government, Commercial Cloud Environment (C2E), Secret Commercial Cloud Environment (SC2E).
 * 2+ years of documented experience on information technology (IT) supply chain security and risk management policies, requirements, and procedures., Advocacy
Marketing
Annuities
Leadership
Innovation
Mitigation
IT Security
Wholesaling
Legislation
Fundraising
Communication
IT Governance
Risk Analysis
Security Risk
Tax Accounting
Risk Mitigation
Decision Making
Social Security
Active Listening
Virtual Training
Security Controls
CompTIA Security+
Solution-Oriented
Project Management
Influencing Skills
IT Risk Management
Information Systems
Information Technology
Stakeholder Engagement
Artificial Intelligence
Employment Applications
Organizational Awareness
Security Risk Management
Employee Assistance Programs
Health And Wellness Coaching
Influencing Without Authority
Continuous Improvement Process

## Description

Nessus
Equities
Operations
Resilience
IT Security
Market Data
NIST 800-53
Risk Analysis
Cyber Security
Cloud Security
Service Models
Risk Management
Microsoft Azure
Access Controls
Control Systems
Cloud Computing
Ancient History
Computer Science
System Lifecycle
Interoperability
Personal Integrity
Multilevel Security
CompTIA Security+ CE
Continuous Monitoring
Concept Of Operations
Supply Chain Security
Information Technology
Cyber Security Policies
Communications Protocols
Vulnerability Management
Vulnerability Assessments
Risk Management Framework
Authorization (Computing)
IT Security Documentation
IAM Level I Certification
IAT Level II Certification
Software As A Service (SaaS)
Platform As A Service (PaaS)
Information Systems Security
Battle Management Technology
Backbone.js (Javascript Library)
Host Based Security System (HBSS)
Infrastructure As A Service (IaaS)
Plan Of Action And Milestones (POA&M)
Certified Information Security Manager
Certified Information Systems Security Professional
Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), The Decision Advantage within Defense at Leidos has an opening for a highly qualified Secret cleared Information System Security Officer. This is an exciting opportunity to bring your experience to support all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) team to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, domain engineers, and Government counterparts across
Government and Industry partners.

Primary responsibilities:

 * Implement and enforce DoD, NIST, CNSS, and organizational cybersecurity policies, procedures, and standards.
 * Support the development, review, and maintenance of system security documentation (SSPs, POA&Ms, Security Assessment Reports, Continuous Monitoring Plans) within eMASS.
 * Conduct vulnerability assessments and assist in remediation of findings (e.g., STIGs, ACAS, Nessus).
 * Assist in preparing and submitting systems for Authorization to Operate (ATO) under the Risk Management Framework (RMF).
 * Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find workarounds for communication protocols that are not interoperable).
 * Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
 * Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
 * Analyze design constraints, trade-offs and detailed system and security design, and consider lifecycle support.
 * Stay current on emerging threats, vulnerabilities, and compliance requirements., Equities
Management
Purchasing
ServiceNow
Upskilling
IT Security
Market Data
Cryptography
Risk Analysis
Cyber Security
Key Management
Risk Management
Authentications
Control Systems
Network Routing
Ancient History
Computer Science
Network Switches
Security Policies
Software Security
Security Solutions
Information Systems
Operations Security
Traceability Matrix
User Identification
Security Engineering
Signals Intelligence
Information Assurance
Cyber Security Systems
Configuration Management
Vulnerability Management
Risk Management Framework
Authorization (Computing)
IT Security Documentation
IAM Level I Certification
Computer Network Operations
Information Systems Security
Security Requirements Analysis
Top Secret-Sensitive Compartmented Information (TS/SCI Clearance)
+0
Information System Security Officer
Leidos

Huntsville, AL*Remote

Linux
Splunk
Equities
Hardening
Market Data
NIST 800-53
Coordinating
Group Policy
Sanitization
Investigation
Cyber Security
Law Enforcement
Ancient History
Active Directory
Secret Clearance
Security Controls
Physical Security
Incident Response
CompTIA Security+
Program Management
Information Systems
Compliance Auditing
Delegated Authority
System Configuration
System Administration
Information Assurance
Continuous Monitoring
Evidence Preservation
Information Technology
Vulnerability Scanning
Security Configuration
Compliance Assessments
Cyber Incident Response
Configuration Management
Cybersecurity Compliance
Vulnerability Assessments
Risk Management Framework
Authorization (Computing)
Cyber Security Assessment
Verbal Communication Skills
Assessment And Authorization
Information Systems Security
Privileged Access Management
Security Requirements Analysis
Security Content Automation Protocol
CompTIA Cybersecurity Analyst (CySA+)
Certified Information Security Manager
Certified Information System Auditor (CISA)
Certified Information Systems Security Professional
National Industrial Security Program Operating Manual (NISPOM)
+0
Login | JoinContact


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)