> Markdown version of [/jobs/ext/4276601-information-systems-security-specialist-isso](https://www.wearedevelopers.com/jobs/ext/4276601-information-systems-security-specialist-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Specialist (ISSO)

- **Company:** TRINZIC CORP
- **Location:** Dayton, OH, United States
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Global Positioning Systems (GPS), Automation of Marketing, Systems Development Life Cycle, SAP (Applications), SAP Implementation, Systems Architecture, Software Vulnerability Management, SARS Software Products, Information Technology, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 15, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3449025018&tx=TT5148THD&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field, plus the years of relevant experience required by the selected KBR job level and contract LCAT. Relevant additional experience may be considered in lieu of education where permitted.
 * Demonstrated experience performing ISSO, cybersecurity analyst, information assurance, or equivalent responsibilities for DoD information systems.
 * Practical experience with the DoD Risk Management Framework and Authority to Operate process.
 * Working knowledge of DoD, Department of the Air Force, and NIST cybersecurity policies, controls, and guidance.
 * Experience developing and maintaining RMF and authorization artifacts such as SSPs, SARs, RARs, POA&Ms, cybersecurity strategies, control traceability matrices, architecture analyses, and continuous monitoring documentation.
 * Experience conducting security assessments, vulnerability reviews, risk analysis, control validation, and remediation tracking.
 * Ability to communicate complex cybersecurity requirements clearly in written technical documentation and with technical, programmatic, and security stakeholders.
 * Current DoD 8570/8140-compliant baseline certification appropriate to the position; Security+ CE or equivalent is acceptable subject to contract requirements.
 * Ability to obtain and maintain a U.S. DoD security clearance

Desired Qualifications

 * Master's degree in cybersecurity, information assurance, engineering management, or a related discipline.
 * Direct experience supporting SCI and Special Access Program environments and applying the Joint SAP Implementation Guide.
 * Experience with developmental or acquisition programs, including cybersecurity integration across engineering milestones and technical reviews.
 * Experience supporting aerospace, unmanned aircraft, command-and-control, GPS/PNT, avionics, or other defense mission systems.
 * Experience with eMASS, ITIPS, security classification guidance, cybersecurity tabletop exercises, Mission-Based Cyber Risk Assessments, or attack-path analysis.
 * Experience coordinating with Security Control Assessors, Program Security Officers, Special Security Officers, Authorizing Officials, and government program offices.
 * Strong facilitation, stakeholder engagement, and technical writing skills.
 * Active Top Secret clearance with SCI eligibility

## Description

As the ISSO, you will support the secure development, authorization, operation, and maintenance of Department of War (DOW) information systems. Day-to-day activities include assessing cybersecurity risks, evaluating system vulnerabilities, validating security controls, supporting Risk Management Framework and Authority to Operate activities, and coordinating cybersecurity requirements with engineering teams, program personnel, security officials, and government stakeholders.

The ISSO will also prepare and maintain cybersecurity policies, procedures, assessment results, authorization documentation, continuous-monitoring records, and remediation plans. The position will also review system architectures and technical documentation, track security findings and Plans of Action and Milestones, support security assessments, and help ensure systems remain compliant with applicable DoW, Department of the Air Force, NIST, SCI, SAP, and program-specific requirements.

Key Responsibilities

 * Support all phases of the DoD Risk Management Framework lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
 * Develop, maintain, and update authorization and cybersecurity artifacts, including System Security Plans, Cybersecurity Strategies, Architecture Analysis Reports, Security Assessment Reports, Risk Assessment Reports, Security Controls Traceability Matrices, Continuous Monitoring Plans, vulnerability assessment reports, and Plans of Action and Milestones.
 * Assess and mitigate cybersecurity threats and risks throughout the system and acquisition lifecycle.
 * Conduct system security evaluations, vulnerability reviews, risk assessments, and security posture assessments to verify compliance with applicable DoD, Department of the Air Force, NIST, and program-specific requirements.
 * Plan and support system certification and authorization activities, testing, liaison efforts, and Authority to Operate packages.
 * Develop and update cybersecurity policies, procedures, guidance, and technical documentation supporting secure system operations and maintenance.
 * Provide cybersecurity guidance to system development, test, integration, and sustainment environments.
 * Review system architectures, technical drawings, requirements, and engineering documentation to identify cybersecurity gaps and recommend mitigations.
 * Coordinate cybersecurity deliverables and adjudicate security requirements with technical teams, government stakeholders, assessors, security officials, and authorizing officials.
 * Support secure operation of systems across SAP, SCI, Secret, and CUI environments, as applicable to the assigned program.
 * Support vulnerability management, continuous monitoring, POA&M management, and remediation tracking.
 * Facilitate cybersecurity working groups, technical interchange meetings, tabletop exercises, and cross-organizational engagements