> Markdown version of [/jobs/ext/3992711-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/3992711-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer

- **Company:** System Soft
- **Location:** Vienna, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Xacta, Cyber Security, Information Systems, Network Security, Nmap, Software Vulnerability Management, Tenable Nessus, Splunk, Vulnerability Analysis
- **Published:** October 28, 2026
- **Apply:** https://www.thejobnetwork.com/job/077d155d-fbf6-4246-9658-7054ab354706/information-systems-security-officer

## About the Role

* Bachelor's degree in a related field, or an Associate's degree with 2+ years of relevant experience, or 4+ years of relevant experience.
\n

 * IAT Level II certification minimum.
\n

 * DoD Top Secret Security Clearance is mandatory.
\n

 * Hands-on experience with RMF, ATO, federal cybersecurity, and information assurance compliance.
\n

 * Strong knowledge of NIST SP 800-37, 800-53 (Revision 4/5), 800-137, 800-39, 800-171, and related security standards.
\n

 * Experience preparing and maintaining ATO packages using eMASS and/or Xacta.
\n

 * Experience with System Security Plans (SSPs), POA&Ms, Contingency Plans, Disaster Recovery Plans, and Incident Response documentation.
\n

 * Knowledge of vulnerability assessment tools such as ACAS, Tenable Nessus, Security Center, or Nmap.
\n

 * Experience with STIG compliance, vulnerability remediation, security control assessments, risk analysis, and compliance reporting.
\n

 * Familiarity with Splunk and continuous monitoring.
\n

## Description

n
\n

 * Provide oversight of assigned networks to ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM) requirements.
\n

 * Support and lead RMF Assessment and Authorization (A&A) activities to obtain and maintain system ATOs under federal security requirements.
\n

 * Collaborate with ISSMs, Information System Owners, Security Control Assessors, Authorizing Officials, and engineering teams to maintain system security.
\n

 * Develop, review, and maintain Plans of Action and Milestones (POA&Ms), track deficiencies, and coordinate vulnerability remediation.
\n

 * Perform daily, weekly, monthly, and quarterly Continuous Monitoring (ConMon) reviews, primarily using Splunk.
\n

 * Assist with incident response activities and verify required system sanitization procedures.
\n

 * Identify critical and high-risk vulnerabilities and report network security posture to CISO and Authorizing Official stakeholders.
\n

 * Create and maintain security documentation, policies, procedures, and compliance reports.
\n

 * Support security assessments, risk analysis, patch validation, and continuous improvement initiatives.
\n