Cyber and Information Systems Security Analyst/ISSO

Johns Hopkins Applied Physics Laboratory; Laurel (MD); On-site; USD 105,000 - 290,000; Full time

Job summary

Johns Hopkins University Applied Physics Laboratory (APL) is seeking a Cyber and Information Systems Security Analyst to support highly classified networks and national security systems. You will work with a team of cybersecurity specialists to design and operate secure solutions that meet sponsor needs.

The role requires experience with RMF, NISPOM and related policies, and the ability to prepare ATO packages using XACTA, ServiceNow, or eMASS.

Qualifications

• Minimum 8+ years of experience in cybersecurity and information systems security.
• Strong working knowledge of NISPOM, JSIG, ICDs, RMF and related policy requirements.
• DoD 8570 certification and TS/SCI+poly clearance are required.
• Experience crafting ATO packages using XACTA, ServiceNow, or eMASS.

Responsibilities

• Collaborate with ISSMs, PMs, System Administrators, and PSRs to develop secure IT solutions for classified environments.
• Contribute to System Security Plans (SSP), POA&M, RAR, SCTM, and CONOPs.
• Capture and refine program requirements for implementation within information systems.
• Audit and analyze security reports for anomalies and recommend actions.

Skills

Cybersecurity

Policy compliance

Documentation

Stakeholder communication

Education

Bachelor's degree in Computer Science / Information Technology / cybersecurity

Tools

XACTA

ServiceNow

eMASS

ACAS

LatteArt

SEAR

Biscotti

Job description

Job Summary

Are you searching for challenging and impactful work supporting highly classified networks? Are you passionate about cybersecurity operations and policy? We are looking for someone like you to join our team at APL. We are ranked as one of Computerworld’s Top Places to Work in IT for 8 years running, and we are seeking a Cyber and Information Systems Security Analyst who will play an instrumental role in the design and operation of national security systems. You will join a hardworking team of cybersecurity specialists who are dedicated to supporting our sponsor’s mission needs.

Responsibilities

• Work closely with Information Systems Security Managers (ISSMs), Program Managers, System Administrators, and Program Security Representatives (PSRs) to develop secure IT solutions for classified environments.
• Provide input into documentation such as the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Risk Assessment Report (RAR), Security Traceability Matrix (SCTM), and Concept of Operations (CONOPs).
• Have knowledge with capturing and refining program requirements to be effectively implemented within the information systems.
• Conduct audits and analyze reports for anomalous activity (e.g., unauthorized access, privileged actions, after‑hour use, unapproved hardware and software). Provide reports and recommend actions after conducting a preliminary review of the security events.
• Participate in configuration management activities by conducting security impact analysis and due diligence reports for security‑relevant changes.
• Support continuous monitoring of the networks to detect and correct areas of security non‑compliance and other risks.

Qualifications

• Have experience working with government sponsors through inspections and assessments.
• Have a strong working knowledge of NISPOM, JSIG, ICDs, RMF, and other policy requirements.
• Skilled in crafting ATO packages using tools such as XACTA, ServiceNow, eMASS, or traditional methods.
• Have experience in LatteArt, SEAR, Biscotti, ACAS, or other STE/STN requirements.
• Have a minimum of 8+ years of experience.
• Have a detailed understanding of computer operating systems, hardware, software, and security procedures.
• Can demonstrate excellent organizational and communication skills and the ability to effectively interact with managers and technical staff.
• Possess a current DoD 8570 certification (Security+, CISSP, etc.).
• Hold an active TS/SCI+poly security clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requires U.S. citizenship.

Preferred Qualifications

• Possess a bachelor’s degree or equivalent experience in Computer Science, Information Technology, or a cybersecurity related field.
• Have worked in or directly supporting the Department of Defense, the IC Community or other U.S. government entities.

About APL

The Johns Hopkins University Applied Physics Laboratory (APL) brings world‑class expertise to our nation’s most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates. At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL’s campus is located in the Baltimore‑Washington metro area.

EEO Statement

All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law. APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact [e-mail].

Compensation

Minimum Rate: $105,000 Annually

Maximum Rate: $290,000 Annually