Information System Security Officer, Senior

AIS (Applied Information Sciences); Washington (District of Columbia); On-site; USD 120,000 - 181,000; Full time

Job summary

Applied Information Sciences is seeking a Senior Lead Security Engineer (ISSO) to provide leadership for system security compliance, authorization, and continuous monitoring across programs. You will mentor staff, coordinate with ISSMs and auditors, and drive risk-informed security strategies in a federal environment.

The role emphasizes strong expertise in RMF, NIST 800-53 controls, and ATO processes, with responsibilities spanning documentation, risk assessment, and vendor engagement.

Qualifications

• Minimum 8+ years of ISSO or ISS Engineer experience in a cleared environment.
• Minimum 8+ years of cybersecurity or related technical experience.
• Bachelor’s or advanced degree in Cybersecurity, Computer Science, IT, or related discipline. An additional 4 years’ of experience will be considered in lieu of a degree.
• DoD 8140 certification or equivalent (CISSP, GISP, or CASP).
• At least one cloud security certification from AWS, ISC2, AWS, Microsoft, or Google.
• Advanced experience with security tools such as Tenable Nessus/Security Center, Splunk, IBM Guardium, HP WebInspect, NMAP.
• Deep expertise in RMF and NIST 800-53, System authorization processes (ATO, IATT, ATO renewals), Continuous monitoring best practices.
• Active Top Secret clearance.

Responsibilities

• Lead documentation, testing, and comprehensive review of system security controls.
• Ensure full system boundary definition and accurate inventory of all technologies.
• Oversee and validate implementation of all assigned NIST 800-53 controls.
• Drive and manage system authorization (ATO) efforts to completion.
• Ensure proper system lifecycle management, including decommissioning strategies.
• Establish and enforce consistent continuous monitoring processes.
• Advise stakeholders on cybersecurity risks, compliance posture, and remediation strategies.
• Mentor Junior and Mid-level ISSOs.
• Interface with ISSMs, AO representatives, and auditors.

Skills

ISSO/ISS Engineer experience

Cybersecurity experience

RMF/NIST 800-53

System authorization (ATO)

Continuous monitoring

Education

Bachelor’s or advanced degree in Cybersecurity/CS/IT

Tools

Tenable Nessus/Security Center

Splunk

IBM Guardium

HP WebInspect

NMAP

Job description

Why AIS?

When you join AIS, you’re joining a mission-driven team that’s passionate about making a difference. You’ll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.

• Employee Ownership: Your contributions directly impact the company’s success, and you share in its achievements.
• Continuous Learning: Access to resources, training, and mentorship to support your professional growth.
• Inclusive Culture: A workplace where diversity is celebrated, and everyone’s voice is valued.
• Mission-Driven Work: Engage in projects that make a meaningful difference for our clients and communities.

What are we looking for?

At AIS, we're looking for more than just skills - we're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.

What you will be doing?

This position is contingent upon contract award. We are currently pursuing a proposal and are seeking qualified candidates to include in our submission and identify candidates for future hiring needs on the program once awarded.

At AIS, we are dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects. For this position, we are seeking a talented individual to join AIS as a Lead Security Engineer.

• Core Knowledge & Skills: Develops strategic security plans, applies advanced cryptography, manages security programs, and designs secure cloud architectures.
• Work & Complexity: Leads strategic projects, integrates security into business processes, develops risk management strategies, and ensures compliance.
• Quality & Independence: Delivers strategic projects, develops innovative solutions, maintains high standards, and ensures stakeholder satisfaction.
• Teamwork & Communication: Leads and mentors teams, aligns efforts with organizational goals, manages performance, and develops training programs.
• Consulting & Engagement: Provides high-level consulting, leads innovation initiatives, develops technology roadmaps, and manages vendor contracts.

As your initial project assignment, you will support the unique needs of our client as a Information System Security Officer, Senior.

Position Summary

The Senior ISSO provides leadership and oversight for system security compliance, authorization, and continuous monitoring activities. This role ensures that systems meet all federal cybersecurity requirements and drives timely authorization outcomes while mentoring junior staff and coordinating across technical and program teams.

This is a proposal-based position; employment is contingent upon contract award and funding availability.

Key Responsibilities

• Lead documentation, testing, and comprehensive review of system security controls
• Ensure full system boundary definition and accurate inventory of all technologies
• Oversee and validate implementation of all assigned NIST 800-53 controls
• Drive and manage system authorization (ATO) efforts to completion
• Ensure proper system lifecycle management, including decommissioning strategies
• Establish and enforce consistent continuous monitoring processes
• Advise stakeholders on cybersecurity risks, compliance posture, and remediation strategies
• Mentor Junior and Mid-level ISSOs
• Interface with ISSMs, AO representatives, and auditors

Required Qualifications

• Minimum 8+ years of ISSO or ISS Engineer experience in a cleared environment
• Minimum 8+ years of cybersecurity or related technical experience
• Bachelor’s or advanced degree in Cybersecurity, Computer Science, IT, or related discipline. An additional 4 years’ of experience will be considered in lieu of a degree.
• DoD 8140 certification or equivalent (CISSP, GISP, or CASP)
• At lease one cloud security certification from AWS Certified Security Specialty, ISC2 Certified Cloud Security Professional, AWS Certified Solutions Architect Associate, Microsoft AZ-500 Azure Security Engineer Associate, or Google Professional Cloud Security Engineer.
• Advanced experience with security tools such as:
  • Tenable Nessus / Security Center
  • Splunk
  • IBM Guardium
  • HP WebInspect
  • NMAP or similar tools
• Deep expertise in:
  • RMF and NIST 800-53
  • System authorization processes (ATO, IATT, ATO renewals)
  • Continuous monitoring best practices
• Active Top Secret clearance

Preferred Qualifications

• Experience supporting high-visibility federal or DoD programs
• Prior experience mentoring or leading security teams

At AIS, we are committed to offering competitive and fair compensation that reflects the skills, experience, and contributions of each team member. The targeted base salary range for this role is $120,000-$181,000 per year. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location. We value transparency in our hiring process and are happy to discuss how your unique qualifications align with our compensation structure during the interview process.

Applied Information Sciences does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, disability, protected veteran status, or any other basis. Employment decisions are based solely on qualifications, merit, and business needs.