> Markdown version of [/jobs/ext/3772258-information-system-security-officer-classified-systems](https://www.wearedevelopers.com/jobs/ext/3772258-information-system-security-officer-classified-systems). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer - Classified Systems - **Company:** Leidos, Inc. - **Location:** Huntsville, AL, United States (Remote available) - **Experience:** Experienced - **Salary:** $69,550.0 - $125,725.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Audit Trail, Configuration Management, CompTIA Security+, Cyber Security, Information Systems, System Configuration, Linux, Monitoring of Systems, Identity and Access Management, Information Security Management, Linux System Administration, Security Content Automation Protocol, Security Information and Event Management, Software Vulnerability Management, Enterprise Software Applications, SC Clearance, Information Technology, National Industrial Security Program Operating Manual (NISPOM), Splunk, Vulnerability Analysis - **Published:** October 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=779a82832f70625e ## About the Role * Bachelor's degree with 2+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience. Additional relevant experience may be considered in lieu of a degree. * Must currently hold an active Secret clearance and be eligible to obtain Top Secret post hire. * Must meet, or be capable of meeting, applicable DoD 8140/DoD Cyber Workforce Framework (DCWF) qualification requirements for the assigned work role through approved certification, education, training, or experience. * Familiarity with the RMF and cybersecurity control implementation, assessment, or compliance activities. * Demonstrate direct experience and/or knowledge in one or more of the following areas: cybersecurity, information systems security, system administration, system hardening, vulnerability management, security configuration management, or compliance auditing. * Working knowledge of Windows and/or Linux operating systems and associated security concepts and configurations. * Familiarity with cybersecurity requirements and standards such as NIST SP 800-53 Rev 5, DISA STIGs, DCSA requirements, the DAAG, NISPOM, or comparable government cybersecurity requirements. * Ability to review technical security findings, document deficiencies, and assist with development and validation of corrective actions. * Ability to develop and maintain detailed cybersecurity documentation and objective evidence supporting information system compliance. * Strong organizational, analytical, written, and verbal communication skills with the ability to manage assigned cybersecurity activities and priorities. * Ability to work collaboratively with Information Technology, system administrators, engineers, program personnel, physical security, and other cybersecurity professionals Relevant Experience Considered: * Cybersecurity, information assurance, information systems security, system administration, system hardening, or Information Technology. * RMF compliance, security control implementation or assessment, continuous monitoring, or authorization package support. * Windows, Linux, Active Directory, Group Policy, Delinea, or comparable enterprise technologies. * STIG, SCAP, vulnerability scanning, security configuration assessment, audit log analysis, or security monitoring. * Technical support of classified information systems, laboratories, engineering environments, or other regulated computing environments., * Experience supporting DoD or DCSA-regulated classified information systems. * Familiarity with the RMF authorization and continuous monitoring lifecycle and development or maintenance of authorization artifacts within eMASS. * Experience performing or supporting STIG, SCAP, vulnerability, and security configuration compliance assessments. * Familiarity with cybersecurity and monitoring tools such as Splunk, Trellix, Tenable/ACAS, SCAP, STIG Viewer, or comparable technologies. * Experience supporting Windows and/or Linux environments, including Active Directory, Group Policy, identity management, or privileged-access management technologies. * Familiarity with DCSA assessments, authorization activities, inspections, or cybersecurity readiness reviews. * Experience reviewing cybersecurity findings and supporting remediation activities with system administrators, engineers, or other technical personnel. * Familiarity with cybersecurity incident response activities, including identification, preservation, containment, eradication, recovery, and reporting. * Industry cybersecurity certifications such as Security+, CySA+, CISSP, CISM, CISA, GCIH, or other certifications relevant to the assigned DoD 8140/DCWF work role. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares. ## Description In this role, you will support the day-to-day cybersecurity compliance and continuous monitoring of classified information systems operating within a DCSA regulated environment. Working under the direction of the Information System Security Manager (ISSM) and in collaboration with other cybersecurity professionals, system administrators, engineers, and program personnel, you will assist in maintaining system authorizations and ensuring continued compliance with applicable cybersecurity requirements. This position provides an opportunity to develop hands-on experience across the Risk Management Framework (RMF) lifecycle while supporting technical security assessments, system hardening, vulnerability management, configuration management, security documentation, and DCSA assessment activities., ISSO's primary responsibilities include supporting the day-to-day cybersecurity oversight and compliance of classified information systems and assisting with maintenance of system authorizations. * Perform security monitoring and compliance reviews of classified information systems and report identified deficiencies, risks, and noncompliance to the ISSM or designated cybersecurity lead. * Support the RMF lifecycle by developing, reviewing, and maintaining authorization artifacts and objective evidence within the system Body of Evidence (BoE). * Assist with implementation, assessment, and continuous monitoring of applicable security controls in accordance with approved system security plans and established cybersecurity procedures. * Perform technical security assessments, including STIG, SCAP, vulnerability scanning, and system configuration reviews. * Document security findings and vulnerabilities and work with cybersecurity personnel, system administrators, and engineering teams to support remediation and validation activities. * Review Configuration Management requests within delegated authority for hardware, software, system configuration, and security-relevant changes, ensuring changes are properly documented and processed through the Configuration Control Board (CCB). * Support periodic technical and administrative assessments of information systems to validate continued compliance with approved security requirements, procedures, and system configurations. * Review security-relevant audit information and system logs using available operating system, security monitoring, and SIEM tools. * Support cybersecurity incident response activities, including investigation, documentation, evidence preservation, containment, corrective actions, and reporting under the direction of the ISSM or designated cybersecurity lead. * Develop, review, and maintain cybersecurity documentation, procedures, assessment artifacts, system records, and other technical documentation. * Provide cybersecurity guidance and security awareness support to system users, administrators, engineers, and program personnel within established policies and procedures. * Support DCSA assessments, security reviews, inspections, authorization activities, and other internal or external cybersecurity assessments. * Collaborate with Information Technology, system administrators, engineers, program management, physical security, and other cybersecurity personnel to identify and resolve information system security issues.