> Markdown version of [/jobs/ext/4705845-senior-information-systems-security-officer-isso-cloud-advisor-ts-sci-w-poly](https://www.wearedevelopers.com/jobs/ext/4705845-senior-information-systems-security-officer-isso-cloud-advisor-ts-sci-w-poly). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Systems Security Officer (ISSO) - Cloud, Advisor - TS/SCI w/poly

- **Company:** Peraton Inc
- **Location:** Huntsville, AL, United States
- **Experience:** Expert
- **Salary:** $146,000 - $234,000
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Information Systems Security Architecture Professional, Nmap, Software Engineering, HP WebInspect, Information Technology, Tenable Nessus, Splunk
- **Published:** November 13, 2026
- **Apply:** https://www.careerboard.com/us/en/find-jobs-in-United-States/-34F99DFA079285964A/

## About the Role

* Bachelor's degree in Computer Science, Business Management, or IT related discipline.
 * Minimum of 9 years of work experience in a Computer Science or Cybersecurity related field with at least 7 of those years serving as an Information Systems Security Officer (ISSO) at a cleared facility.
 * Must have at least 1 of the following certifications: CISSP, GISP, or CASP+/SecurityX
 + In addition, must have one cloud certification:
o AWS Security Specialty, CCSP, AWS SA Associate, AZ-500, or Google Professional Cloud Security Engineer

 * Must meet DoD 8140.03 Advanced proficiency aligned to Information Systems Security Manager (Work Role 722). Must have at least 1 of the following certifications or advanced education from the list below:
 + CISM - Certified Information Security Manager
 + CISSP - Certified Information Systems Security Professional
 + CISSP-ISSMP - Certified Information Systems Security Professional - Information Systems Security Management Professional
 + FITSP-M - Federal IT Security Professional-Manager-NG
 + GCIA - GIAC Certified Intrusion Analyst
 + GCIH - GIAC Certified Incident Handler
 + GICSP - Global Industrial Cyber Security Professional
 + GSLC - GIAC Security Leadership Certification
 + Doctorate - Computer Science
 + Doctorate - Cybersecurity
 + Doctorate - Data Science
 + Doctorate - Information Systems
 + Doctorate - Information Technology
 + Doctorate - Software Engineering
 + Master of Science - Strategic Information and Cyberspace Studies (NDU CIC)
 + Masters - Computer Science
 + Masters - Cybersecurity
 + Masters - Data Science
 + Masters - Information Systems
 + Masters - Information Technology
 + Masters - Software Engineering
 * Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, Splunk, IBM Guardium, HP Web Inspect, Network Mapper (NMAP), and/or similar applications.
 * Active TS/SCI security clearance with the ability to obtain a polygraph.

## Description

* Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
 * Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, risk appetite, and compliance requirements.
 * Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
 * Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
 * Prepare risk management documentation for system authorization and executive decision-making.
 * Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance.
 * Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.
 * Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders.
 * Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders.
 * Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement.