> Markdown version of [/jobs/ext/767286-information-systems-security-management-issm-ts-sci-w-polygraph](https://www.wearedevelopers.com/jobs/ext/767286-information-systems-security-management-issm-ts-sci-w-polygraph). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Management (ISSM) - TS/SCI w/Polygraph - **Company:** General Dynamics Information Technology - **Location:** McLean, VA, United States - **Experience:** Experienced - **Salary:** $123,250.0 - $166,750.0 - **Contract:** Permanent contract - **Skills:** Xacta, Amazon Web Services, Configuration Management, Cyber Security, Information Systems, Computer Engineering, System Configuration, Firmware, Information Systems Security Architecture Professional, Security Content Automation Protocol, Information Technology - **Published:** June 26, 2026 - **Apply:** https://dejobs.org/x/x/D9FA8DE27ED44B5580493C8603A3EDD7/job/ ## About the Role RMF,Security Technical Implementation Guides (STIGs),Xacta (Platform) Experience: 4 + years of related experience, * Education : Bachelors (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline) * Required Experience : 4+ yrs * Required Technical Skills: * Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs * Experience with XACTA 360, Continuum and other SCAP Compliant tools * Require strong documentation skills to create and update policies, process documentation and procedures * Security Clearance Level : TS/SCI with active polygraph * Desired Certifications: * Certified Ethical Hacker 10 (CEH) * Certified Information Systems Security Professional (CISSP) * Certified Information Systems auditor (CISA) * NIST Cybersecurity Framework (NCSF) * AWS Solutions Architect Associate or Professional * Location : McLean, VA - On Customer Site ## Description * Support customer RMF workflow and processes by proposing, coordinating, implementing and enforcing information system security policies, instructions, standards, and methodologies * Review and approve customer requests related to accesses, devices, and other authorizations * Maintain current system information in XACTA to support organizational requirements and processes Evaluate the impact of network and system changes using RMF processes and approve the changes * Manage multiple projects throughout Authorization and Accreditation (A&A) process from concept to Authority to Operate (ATO) * Coordinate with system stakeholders on mitigating system vulnerabilities outlined in POA&Ms * Submit recommendations to stakeholders for system configuration deviations from the required baseline * Conduct periodic reviews to ensure compliance with SSP * Ensure configuration management for security-relevant IS software, hardware and firmware is maintained and documented * Ensure system recovery processes are monitored to ensure security features and procedures are properly restored * Ensure all IS security-related documentation is current and accessible to properly authorized individuals * Formally notify the appropriate individuals when changes occur that might affect authorization * Participate in governance and project reviews identified by the customer ## Related Videos - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)