Information System Security Officer

Leidos Inc; Virginia (IL); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Secret-cleared Information System Security Officer to support ABMS DI Processing Node and JADC2 objectives. The role emphasizes implementing RMF and NIST controls, maintaining SSPs, and coordinating with program and government counterparts to ensure secure, resilient DoD IT systems.

The position requires active clearance, U.S. citizenship, and 5+ years in cybersecurity with ISSO experience, along with DoD security policy knowledge and certification readiness or attainment.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Must be a U.S. citizen.
• Must possess an active and current Secret clearance.
• 5+ years of cybersecurity experience, with 2–3 years as an ISSO or similar role.
• Knowledge of DoD RMF process and NIST SP 800-53 controls.
• Familiar with STIGs and vulnerability management tools (ACAS, Nessus, HBSS, Splunk).
• Experience supporting DoD ATO/authorization processes and lifecycle documentation.
• DoD 8570/8140 IAT II or IAM I baseline certifications (e.g., Security+ CE, CISSP).

Responsibilities

• Implement and enforce DoD, NIST, CNSS cybersecurity policies and standards.
• Develop and maintain SSPs, POA&Ms, and Security Assessment Reports in eMASS.
• Conduct vulnerability assessments and assist remediation efforts.
• Support ATO/authorization processes under RMF.
• Identify remediation for technical problems during testing and deployment.
• Contribute to RMF processes and lifecycle documentation.
• Perform risk analysis for major changes to applications/systems.
• Stay current on emerging threats and compliance requirements.

Skills

Cybersecurity experience

RMF knowledge

NIST SP 800-53

Vulnerability management

Certifications (IA T II/IAM I)

GovCloud knowledge

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field

Tools

ACAS

Nessus

HBSS

Splunk

Job description

Description

The Decision Advantage within Defense at Leidos has an opening for a highly qualified Secret cleared Information System Security Officer. This is an exciting opportunity to bring your experience to support all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) team to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, domain engineers, and Government counterparts across Government and Industry partners.

Primary responsibilities:

• Implement and enforce DoD, NIST, CNSS, and organizational cybersecurity policies, procedures, and standards.

• Support the development, review, and maintenance of system security documentation (SSPs, POA&Ms, Security Assessment Reports, Continuous Monitoring Plans) within eMASS.

• Conduct vulnerability assessments and assist in remediation of findings (e.g., STIGs, ACAS, Nessus).

• Assist in preparing and submitting systems for Authorization to Operate (ATO) under the Risk Management Framework (RMF).

• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find workarounds for communication protocols that are not interoperable).

• Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.

• Analyze design constraints, trade-offs and detailed system and security design, and consider lifecycle support.

• Stay current on emerging threats, vulnerabilities, and compliance requirements.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field. Additional years of experience will be considered in lieu of degree.

• Must be U.S. Citizen

• Must possess an active and current Secret clearance.

• 5+ years of experience in cybersecurity, with at least 2-3 years specifically as an ISSO or similar security role.

• Working knowledge of:

  • DoD RMF process and NIST SP 800-53 controls

  • Security Technical Implementation Guides (STIGs)

  • Vulnerability management tools (ACAS, Nessus, HBSS, Splunk, etc.)

• Monitor and evaluate system compliance with information technology (IT) security, resilience, and dependability requirements.

• Experience supporting and developing required artifacts for the ATO/authorization processes within the DoD environment.

• 2+ years of documented experience cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

• DoD 8570/8140 IAT Level II or IAM Level I baseline certification (e.g., Security+ CE, CAP, CISM, CISSP).

Additional Qualifications/Certifications

• TS/SCI clearance

• Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).

• Experience with government cloud security environments ( GovCloud, Azure Government, Commercial Cloud Environment (C2E), Secret Commercial Cloud Environment (SC2E).

• 2+ years of documented experience on information technology (IT) supply chain security and risk management policies, requirements, and procedures.

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:September 2, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $87,100.00 - $157,450.00

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote