> Markdown version of [/jobs/ext/4280360-mid-level-information-system-security-officer-ts999](https://www.wearedevelopers.com/jobs/ext/4280360-mid-level-information-system-security-officer-ts999). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Mid-Level Information System Security Officer #TS999 - **Company:** CRL Technologies - **Location:** Lexington Park, MD, United States (Remote available) - **Experience:** Experienced - **Salary:** $80,000 - $135,000 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Cyber Security, Information Systems, System Configuration, Data Transmissions, Linux, File Transfer, Identity and Access Management, Information Security Management, Information Technology Audit, OpenShift, SAP (Applications), Information Technology, Splunk, Plan of Action and Milestones, Vmware - **Published:** October 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0ebd42c8c16fd728 ## About the Role Required Education: High School Diploma or GED. Required Experience: * Candidates must have at least three (3) years of combined experience performing duties described in this position description. * Candidates must meet the IAM I certification requirements (provide certifications) in accordance with DoD 8570.01M, DoD 8140, and DOD 5239.2. Desired Experience: * Candidates should have experience administering SAP information systems. * Experience utilizing and configuring Splunk for reviewing system audit logs. * Windows, Linux, VMWare, and OpenShift experience. * Experience with Platform IT (PIT) or PIT accreditations. Allowable Experience/Education Substitutions: Experience cannot be substituted for education. Security Clearance Required: A final DoD Top Secret clearance. ## Description The candidate will be the ISSO for information systems under their cognizance. The ISSO will collaborate with the program team to ensure the security of information systems and compliance with the Joint Special Access Program Implementation Guide, Rev 4 (JSIG), Risk Management Framework (RMF), and other applicable documents. The ISSO will be an active member of an information assurance (IA) team with broad responsibility for the security of SAP information systems. ISSOs will plan, implement, upgrade, and monitor security measures for the protection of information systems. ISSOs will ensure the appropriate security controls are in place to safeguard digital files and vital electronic infrastructure. ISSOs will ensure proper response to computer security breaches, incidents, and viruses. ISSOs will analyze system vulnerabilities and assess risks to the information system. ISSOs will collaborate with the ISSM, information technology (IT) team, and management triage vulnerabilities and determine priority for remediation. ISSOs will develop, maintain, and present information system risk metrics showing information system risk over time. ISSOs will develop, update, and maintain IT / IA policy and strategy for the program office including conducting business impact analyses and other analyses required to develop policies. ISSOs will develop and provide accreditation packages in accordance with JSIG and RMF based federal regulations and policies and documentation supporting Authority to Operate (ATO) requirements for developmental hardware, software, and facilities. ISSOs will audit Baseline + Accessibility and Cross Domain Solution environments using system logs and auditing tools to validate security posture and monitor for insider threat. ISSOs will manage and maintain Plan of Actions and Milestones (POA&M) documentation for program office and supporting sites to ensure required actions are completed on time. ISSOs will manage cybersecurity project scope, schedule, and risks and will keep the ISSM, IT team, and management informed of progress, issues, and vulnerabilities with sufficient time to ensure system ATO is maintained. ISSOs will collaborate with Contractors supporting program office efforts to ensure accreditation packages are submitted. ISSOs will also maintain communications with the Security Control Assessor (SCA)/Delegated Authorizing Official (DAO), understand issues, and report issues to the ISSM and management as required. ISSOs will conduct and lead successful Assessment and Authorization (A&A) events in support of program office efforts. ISSOs may act as a Data Transfer Agent utilizing an approved Assured File Transfer procedure.