> Markdown version of [/jobs/ext/4613600-mid-level-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/4613600-mid-level-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Mid-Level Information Systems Security Officer

- **Company:** Belay Technologies, Inc
- **Location:** Baltimore, MD, United States
- **Experience:** Experienced
- **Salary:** $105,000 - $200,000
- **Contract:** Permanent contract
- **Skills:** Systems Engineering, JIRA, Configuration Management, Cyber Security, Information Systems, Firmware, Identity and Access Management, Information Security Management, Public Key Infrastructure, Redmine, Software Requirements Analysis, Servicenow
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/1_Jazz63134-11111238

## About the Role

+ TS/SCI Clearance with polygraph
 + This position has been designated as requiring IAM Level 1 CWIP certification and requires one of the following baseline certifications to qualify
 + CAP,CND, Cloud+, GSLC, Security+CE, HCISPP, CASP+CE, CISM, CISSP (or associate), CCISO
 + Bachelor's degree in a technical discipline from an accredited college or university
 + Ten (10) years relevant work experience.
Four (4) years of additional experience may be substituted for a bachelor's degree.

 + At least four (4) years of this experience must be as an ISSO on programs and counteracts of similar scope, type, and complexity.
Candidates are required to have the following skills:

 + Experience with:
 + The ICD 503/NIST 800-53 certification and accreditation process
 + The Risk Management Framework
 + Developing and maintaining SSPs
 + IAVA review and handling Interpreting
 + Security Scan results
 + Interfacing with System Administrators and Software Engineers
 + Task tracking systems (e.g.
Jira, Redmine, ServiceNow)

 + Understands:
 + Public Key Infrastructure-based authentication
 + A variety of security policies, especially within the IC
 + Fundamentals of technical security risk assessment
 + Understands how to perform analysis of alternatives
 + Able to clearly communicate ideas and status updates to management and other stakholders

## Description

The candidate will be responsible for security architecture and systems engineering supporting ICAM projects.
The ISSO will provide guidance to the team to support system accreditation (IATT and ATO)., Provides support for a program, organization, system, or enclave's information assurance
program.
Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
Assists with the management of security aspects of the information system and performs day-to-day security operations of the system.
Evaluate security solutions to ensure they meet security requirements for processing classified information.
Performs vulnerability/risk assessment analysis to support certification and accreditation.
Provides configuration management (CM) for information system security software, hardware, and firmware.
Manages changes to system and assesses the security impact of those changes.
Prepares and reviews documentation to include System Security Plans (SSPs ), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).