> Markdown version of [/jobs/ext/3744309-isso-5](https://www.wearedevelopers.com/jobs/ext/3744309-isso-5). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ISSO 5 - **Company:** N3B Los Alamos - **Location:** Los Alamos, NM, United States - **Contract:** Permanent contract - **Skills:** Xacta, Microsoft Windows, Active Directory, Software System Penetration Testing, Audit Trail, Configuration Management, Cyber Security, Information Systems, Information Leak Prevention, Linux, Digital Forensics, Monitoring of Systems, Information Security Management, Intrusion Detection Systems, Network Intrusion Detection Systems, Smartsuite, Security Content Automation Protocol, Security Information and Event Management, Software Vulnerability Management, Data Logging, Enterprise Software Applications, SARS Software Products, Malware, Process Control Systems, Nessus, Operational Systems, Splunk, Plan of Action and Milestones, Vulnerability Analysis - **Published:** October 15, 2026 - **Apply:** https://diversityjobs.com/career/18637240/Isso-5-New-Mexico-Los-Alamos ## About the Role * Excellent interpersonal skills: written and verbal communication, effective listening, conflict resolution * Extensive experience as an ISSO, cybersecurity analyst, or security engineer within DOE/NNSA environments. * Deep knowledge of the NIST Risk Management Framework (RMF), NIST SP 80053, and A&A processes. * Deep working knowledge of NIST SP 800series publications (specifically 80037, 80053, and 800137) * Strong proficiency in cybersecurity toolsets (logging, endpoint protection, vulnerability management). * Demonstrated capability to support elevated security leadership roles, including AISSM or ISSM support functions. * Familiarity with security tools such as Tenable (Nessus, Security Center), Splunk, SCAP Tool, STIG Viewer * Familiarity with federal IT compliance structures (e.g., FISMA, DOE Order 205.1C/D, FedRAMP) * Experience using federal GRC tools (e.g., XACTA, eMASS, Archer, RegScale) to manage risk packages * Related certifications including CISSP, CISM, CASP, Security+, CHFI, CEH * Must be able to maintain confidentiality when working with sensitive information. * All qualified applicants will be considered; however, the successful candidate must be able to obtain and maintain a Q clearance from the United States Department of Energy., * Cybersecurity Leadership * RiskBased Decision Making * Regulatory Documentation Rigor * Team Mentorship * CrossFunctional Collaboration * Situational Awareness & Escalation Judgment, Bachelor's degree with twelve (12) years of experience or a Master's degree with ten (10) years of experience. A combination of education and relevant experience wherein the knowledge, skills and abilities to perform the position's duties and responsibilities have been adequately demonstrated is acceptable. Preferred * Experience with N3B/LLCC system portfolios and organizational structures. * Prior involvement in POA&M/ATO submission cycles and DOE reporting. * Experience supporting ICS/Operational Technology (OT) systems and enterprise monitoring platforms. Experience required for all levels: * Technical Familiarity for Risk Assessment: working knowledge of security controls, audit logs, and risk implications associated with enterprise systems. * Enterprise Infrastructure: Windows/Linux operating systems, Active Directory, and Group Policy Objects (GPOs). * Security Operations & Engineering: SIEM platforms, Network Intrusion Detection Systems (IDS), hostbased antivirus consoles, and Data Loss Prevention (DLP) solutions. * Technical Assessments: review/translation of outputs from advanced cybersecurity tools, vulnerability scanners, penetration tests, malware analysis, and digital forensics into actionable risk decisions. Education Equivalency: 1 years of relevant experience for 1 year of college. ## Description The Information Systems Security Officer (ISSO) Lead / Alternate Information System Security Manager (AISSM) provides seniorlevel cybersecurity oversight and technical support across assigned information systems to ensure compliance with Department of Energy (DOE), National Nuclear Security Administration (NNSA), federal, and N3B cybersecurity requirements. This position leads to execution of system authorization activities, continuous monitoring, vulnerability management, and mentorship of ISSO staff. The role advises and shares ownership/authorship of System Security Plans (SSPs), Security Assessment Reports (SARs), Assessment & Authorization (A&A) packages, control narratives, and other administrative RMF documents. The ISSO Lead also serves as the Alternate Information System Security Manager (AISSM), covering ISSM responsibilities during periods of absence, major escalations, or elevated operational needs., * Serve as Lead ISSO across assigned General Support Systems (GSS), Major Applications (MA), Industrial Control Systems (ICS), and specialty systems. * Support the ISSM by ensuring operational continuity during escalated or delegated ISSM activities, including systemsecurity leadership, coordination of staff, and implementation of DOE/NNSA cybersecurity mandates. * Provide mentorship and skill development for ISSO, ISSE, and Risk Analyst staff. * Lead development and maintenance of all Assessment & Authorization (A&A) documentation, including SSPs, SARs, Configuration Management Plans (CMPs), Contingency Plans (CPs), Incident Response Plans (IRPs), and Risk Assessment (RA) artifacts. * Support ISSM and ISSO in preparation, review, and timely submission of Regulatory Documentation (RegDocs) deliverables, Plan of Action & Milestones (POA&M) updates, and Authorization to Operate (ATO) packages. * Ensure documentation is consistent with Los Alamos Legacy Cleanup Contract (LLCC) governance expectations. * Oversee implementation, testing, and verification of NIST SP 80053 controls across assigned systems. * Conduct vulnerability management, log review, control testing, and evidence collection. * Elevate critical findings to ISSM, Cybersecurity Manager, and Chief Information Security Officer (CISO), and coordinate mitigations. * Lead risk assessments for cybersecurity findings, system changes, new capabilities, and emerging DOE directives. * Support ISSM, Cybersecurity Manager, and CISO in enterprise risk reporting, compliance tracking, and implementation of organizational governance processes. * Facilitate peer reviews, POA&M / PerformanceBased Incentive (PBI) contributions, and readiness for DOE assessments. * Engage system owners, Subject Matter Experts (SMEs), and technical stakeholders to ensure cybersecurity expectations are clearly understood and implemented. * Provide the ISSM with situational updates on risk posture, compliance status, and emerging issues requiring managerlevel attention. * Support crossfunctional collaboration with Cyber Engineering, ICS security, Governance, Risk & Compliance (GRC), and enterprise monitoring teams. * Operational Backup: Ensure continuity of cybersecurity operations when ISSM responsibilities are delegated. * Program Oversight: Support leadership in reviewing system posture, data calls, document tracking, ATO milestone tracking, and DOE submissions. * Staff Coordination: Help balance workloads across ISSO 4-5 staff, ISSE personnel, and Risk Analysts. * Escalation Support: Provide timely and accurate analysis for issues requiring AISSM review, including major vulnerabilities, incidents, or compliance risks. * CrossSite Alignment: Support ISSM during coordination with EMLA, EMHQ, or other DOE/NNSA entities., While working to achieve N3B LLCC objectives, the Information Systems Security Officer (ISSO) will ensure all activities and operations are performed in a safe and deliberate manner to include protecting the confidentiality and integrity of Personally Identifiable Information (PII). This role will maintain required safety, security and operational training; assure procedural and regulatory compliance; and make safety, security and quality an integral part of every task; including taking the necessary steps to stop work if continuing the job is unsafe or compromises security.