Information System Security Officer (ISSO)

Leidos LLC; Lorton (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos in Reston, Virginia, seeks an Information System Security Officer (ISSO) to support a fast-paced Air Force Life Cycle Management Center program. This on-site role ensures DoD information systems meet RMF, NIST, JSIG standards, and involves risk assessments, continuous monitoring, and policy development.

Collaborate with cross-functional teams and maintain security documentation. The position requires US citizenship with active TS clearance and SCI eligibility, a relevant degree with

Qualifications

• US Citizen with Top Secret clearance and SCI eligibility.
• Bachelor’s degree with 4+ years experience or Master’s with 2+ years.
• In-depth knowledge of DoD cybersecurity policies, RMF, NIST, JSIG, FISMA.
• DoD8140 Intermediate certification (e.g., Cloud+, Security+).
• Experience with risk management, vulnerability assessments, and audits.
• Strong communication and cross‑functional collaboration skills.

Responsibilities

• Collaborate daily with the ISSM to provide cybersecurity guidance.
• Develop and maintain security policies, procedures, and documentation per DoD standards.
• Oversee security posture and RMF accreditation for DoD ISs.
• Perform risk assessments, vulnerability assessments, and security audits.
• Manage continuous monitoring of security controls and incident response.
• Coordinate with engineering, IT, and operations to enforce security controls.
• Maintain SSPs, risk assessments, and POA&Ms.
• Stay current with emerging threats and security trends.

Skills

DoD cybersecurity policies

RMF / NIST 800-53

Cloud security

Risk assessment

Vulnerability assessment

Security monitoring

Incident response

Cross-functional collaboration

Education

Bachelor’s degree with 4+ years experience

Master’s degree with 2+ years experience

Tools

SIEM

Firewalls

Vulnerability scanners

Cloud tooling

Job description

The Defense Sector at Leidos is looking for an Information System Security Officer (ISSO) to support a fast-paced program with the Air Force Life Cycle Management Center. This role involves supporting the delivery of comprehensive IT and support services to ensure mission success while adhering to DoD standards and regulations. The ISSO will oversee the cybersecurity posture of DoD information systems, ensuring compliance with DoD security standards and protecting sensitive data. The ISSO will develop and implement security policies, conduct risk assessments, manage system accreditations (RMF), and execute continuous monitoring efforts. This role requires collaboration with cross-functional teams to enforce security controls and manage continuous monitoring. The ISSO will also maintain security documentation and ensure ongoing compliance with applicable regulations. The ISSO will be expected to be proficient technically & to perform hands‑on cybersecurity tasks. This position will require 100% on‑site work with no remote work supported.

Primary Responsibilities:

• Collaborate daily with the ISSM to provide expert cybersecurity guidance and recommendations.
• Support the development, implementation, and maintenance of security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA, JSIG).
• Oversee the security posture of DoD information systems, ensuring they meet cybersecurity requirements for confidentiality, integrity, and availability.
• Perform risk assessments, vulnerability assessments, and security audits to identify system vulnerabilities and provide remediation strategies.
• Manage and conduct continuous monitoring of security controls, ensuring the protection of classified and unclassified data.
• Coordinate with cross‑functional teams (engineering, IT, operations) to implement and enforce security protocols and best practices.
• Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and continually maintained in compliance with all applicable requirements.
• Act as the primary point of contact for security‑related issues, assisting in incident response and reporting to senior management and government customers.
• Provide security training and awareness programs for personnel involved in the operation of DoD systems.
• Maintain and track security documentation, including system security plans (SSPs), risk assessments, and Plan of Actions & Milestones (POA&Ms).
• Stay current with emerging cybersecurity threats, vulnerabilities, and trends to ensure the program adapts to evolving security challenges.

Basic Qualifications:

• US Citizen with at least an active Top Secret Clearance with the ability to obtain an SCI prior to your start date.
• Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree.
• In‑depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST800‑53, RMF, FISMA, ICD503/705, JSIG, DAAPM).
• In‑depth experience with cloud computing and building/maintaining an ATO for cloud‑based information systems Must have a DoD8140 Intermediate certification (e.g. Cloud+, Security+, etc.).
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross‑functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Interest in continuous learning and professional development in cybersecurity.

Preferred Qualifications:

• US Citizen with an active TS/SCI security clearance.
• DoD8140 Advanced certification e.g. CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), etc.
• Experience with JSIG implementation of the Risk Management Framework (RMF) for DoD system accreditations and continuous monitoring processes.
• Experience in managing security for complex DoD programs or mission‑critical systems.
• Familiarity with cloud security practices and systems, particularly in a hybrid or government cloud environment.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Cloud security certifications (e.g. Azure Security Technologies or AWS Certified Security Specialty).
• Experience with configuration management and change management processes in a secure environment.

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step10 is ancient history. We’re already at step30 — and moving faster than anyone else dares.

Pay Range: Pay Range $87,100.00 - $157,450.00

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2billion for the fiscal year ended January2,2026. For more information, visit www.Leidos.com.

Pay and Benefits Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data Leidos will never ask you to provide payment‑related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment‑related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.