Information System Security Officer (ISSO)

Peraton; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Peraton's Space & Intelligence Sector in Herndon, VA seeks a mid-to-senior Information System Security Officer (ISSO). The role is embedded with a development team, ensuring IC systems stay compliant, accredited, and operational within security requirements.

It is hands‑on and interfaces with system owners, engineers, and government representatives. You will lead security efforts, manage RMF artifacts, track vulnerabilities, and oversee continuous monitoring to keep mission systems secure and

Qualifications

• Active TS/SCI with Polygraph required.
• Bachelor's degree with 8+ years of relevant experience; Master's with 6+ years or 4+ years in lieu of degree.
• Active DoD IAT Level I Certification.
• Experience supporting RMF-based A&A activities and documentation.
• Experience with IC or DoD mission systems; RMF and Xacta experience.
• Strong security documentation skills and ability to communicate with diverse teams.

Responsibilities

• Act as security lead for assigned systems, interfacing with customer security teams and leadership.
• Maintain RMF artifacts (SSP, SCTM, POA&M, IRP) and update as systems evolve.
• Track vulnerabilities; coordinate patching and remediation; ensure timely closure.
• Manage continuous monitoring activities: scanning, log review, reporting, compliance checks.
• Support accreditation/re-accreditation; prepare docs and coordinate actions with team.
• Validate technical controls (OS hardening, access controls, audit, CM).
• Provide security guidance on changes or new integrations; ensure customer expectations are met.

Skills

Security policy understanding

Technical writing

Communication

Team collaboration

Vulnerability tracking

RMF knowledge

Education

Bachelor's degree + 8+ years experience

Master's degree + 6+ years or 4+ years in lieu

Tools

RMF

Xacta

ICD 503

NIST SP 800-53

DoD cybersecurity requirements

Job description

Required Qualifications:

• Active TS/SCI with Polygraph
• Bachelor's degree with 8+ years of relevant experience; Master's degree with 6+ years of relevant experience or 4+ years of relevant experience in lieu of a degree
• Active DoD IAT Level I Certification
• Experience supporting Assessment and Authorization (A&A) activities and the assosciated information assurance processes and documentation using RMF
• Experience supporting Intelligence Community or DoD mission systems
• RMF and Xacta experience
• Solid understanding of ICD 503, RMF, NIST SP 800‑53, DIA policies, and DoD cybersecurity requirements
• Strong writing and system security documentation skills
• Ability to communicate effectively with technical and non‑technical personnel
• Ability to take direction and work productively as a part of a team

Desired Qualifications:

• Background with cross-domain environments, classified networks, or cloud-based systems in the intelligence community
• Experience working with Splunk
• Experience supporting programs with tight operational timelines and rapid change cycles
• Experience working with AWS/Google cloud-hosted information systems or applications
• Experience working with Redhat or CentOS Linux operating systems
• Experience working in a DevSecOps environment

Peraton’s Space & Intelligence Sector is looking for a mid-to-senior Information System Security Officer (ISSO) to join a diverse development team at our Herndon, VA, office. In this role, you will support IC systems and ensure they remain compliant, accredited, and operational within the customer’s security requirements. This role is hands‑on and embedded with the program, working directly with system owners, engineers, and the government to maintain security posture and keep mission systems running without interruption.

Responsibilities include:

• Act as the security lead for assigned systems, serving as the direct interface with the Customer’s security team(s) and program leadership.
• Maintain RMF and ICD 503 artifacts (SSP, SCTM, POA&M, IRP, etc.) and update them as the system evolves.
• Track vulnerabilities, coordinate patching and remediation with team, and ensure findings are closed on schedule.
• Manage continuous monitoring activities, including scanning, log review, security reporting, and compliance checks.
• Support accreditation and re‑accreditation activities; prepare documentation and coordinate actions with team.
• Validate and oversee implementation of technical controls across system components (OS hardening, access controls, audit, configuration management).
• Provide security guidance on system changes, new integrations, or capability deployments.
• Work with users, administrators, and developers to ensure changes meet Customer security expectations before being implemented.
• Maintain situational awareness of existing and potential program risks and communicate impacts and required mitigating actions to leadership.