Information Systems Security Officer

Leidos Inc; Tampa (FL); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking an Information System Security Officer to join the Digital Modernization Sector in Tampa, FL, supporting the USSOCOM EDAT mission. The ISSO will embed with a software development team to ensure cybersecurity across the SDLC for Azure-based portal and gateway applications.

The role requires applying DoD RMF, NIST guidance, and DISA STIGs, maintaining SSP/POA&M/SAR artifacts, and coordinating with AOs/ISSMs to drive RMF-based accreditation.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related discipline; 12 years of relevant experience, or a Master's with 8 years of experience.
• Active Top Secret security clearance.
• CISSP, CAP, or CASP+ certifications.
• Knowledge of NIST RMF, eMASS workflows, and DoD cloud accreditation processes.
• Ability to navigate complex problems with applied technical knowledge; effective communication with stakeholders.
• Experience managing security compliance for cloud-hosted solutions in Azure or similar environments.
• Strong understanding of DISA STIGs, NIST 800-53 controls, and vulnerability management.
• Familiarity with DevSecOps and Agile SDLC governance from a governance perspective.
• Proven success liaising with AOs, ISSMs, and system owners to expedite RMF-based accreditation.
• Excellent written and verbal communication skills for technical and non-technical audiences.

Responsibilities

• Lead ISSO embedded with a software development team to ensure cybersecurity across the SDLC for Azure-based portal and gateway apps.
• Guide the team in applying DoD cybersecurity policies, NIST RMF guidance, and DISA STIG requirements.
• Ensure compliance with RMF, FedRAMP, and DISA SRG.
• Own and update SSP, POA&M, SAR, and related artifacts for ATO readiness.
• Coordinate with AOs, ISSMs, and system owners to drive RMF accreditation across classifications.
• Oversee integration of enterprise cybersecurity services (ACAS, HBSS, BCAP, PKI/ICAM) in security docs and testing.
• Monitor vulnerabilities and audit results; ensure remediation is tracked to closure.
• Mentor junior cybersecurity personnel and promote a compliance-driven culture.
• Stay informed on DoD guidance, threat trends, and cloud security best practices.

Skills

Security governance

Communication skills

RMF & DoD guidance

Cloud security (Azure)

Vulnerability management

Agile/SDLC governance

Team mentoring

Education

Bachelor's degree in Cybersecurity, Information Assurance, or related discipline

Master's degree in information technology or related field

Tools

Azure

eMASS

ACAS

HBSS

PKI/ICAM

Job description

Description

The Digital Modernization Sector at Leidos currently pursuing a new opportunity that has openings for a Information System Security Officer (ISSO) to work in Tampa, FL. This is an exciting opportunity to use your experience helping the U.S. Special Operations Command (USSOCOM) Enterprise Development, Application, and Training (EDAT) mission. In this mission we are focused on providing innovative, data-driven solutions and enterprise architecture enhancements to enable seamless operations across USSOCOM's global network. The program emphasizes rapid development and deployment of technologies to enhance the mobility and readiness of Special Operations Forces (SOF) in both combat and non-combat scenarios. Key tasks include program management, application development, training support, and technology integration to maintain USSOCOM's operational edge. The EDAT program underscores agility and adaptability, ensuring SOF professionals have access to the information and tools they need to meet evolving mission requirements.

Primary Responsibilities

• Serve as the lead Information Systems Security Officer (ISSO) embedded with a software development team, ensuring that all cybersecurity compliance requirements are met throughout the Software Development Lifecycle (SDLC) for Azure-based portal and gateway applications.
• Guide the development team in interpreting and applying DoD cybersecurity policies, NIST RMF guidance, and DISA STIG requirements throughout system development and deployment.
• Ensure full compliance with applicable security frameworks, including the NIST Risk Management Framework (RMF), FedRAMP, and the DISA Cloud Computing Security Requirements Guide (SRG).
• Own and maintain key security documentation such as the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Security Assessment Report (SAR), and supporting artifacts required for achieving and sustaining an Authority to Operate (ATO).
• Coordinate closely with Authorizing Officials (AOs), Information System Security Managers (ISSMs), system owners, and other stakeholders to manage and drive the ATO process across multiple classification levels.
• Provide oversight and direction for the integration of enterprise cybersecurity services (e.g., ACAS, HBSS, BCAP, PKI/ICAM) and ensure these services are properly accounted for in security documentation and compliance testing.
• Monitor and assess system vulnerabilities and audit results; ensure findings are documented and tracked to closure in accordance with policy.
• Experience mentoring junior cybersecurity personnel and fostering a compliance-driven security culture within cross-functional teams.
• Knowledge of emerging cybersecurity technologies and their implications for DoD cloud security compliance.
• Participate in Agile and Waterfall development meetings to provide governance input and security policy guidance that aligns with DoD accreditation expectations.
• Stay informed of changes in DoD cybersecurity guidance, threat landscape developments, and cloud security best practices to adjust compliance strategies as needed.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related discipline and 12 years of relevant experience, or a Master's degree with 8 years of relevant experience.
• Active Top Secret security clearance.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), or CompTIA Advanced Security Practitioner (CASP+).
• Demonstrated knowledge of the NIST RMF, eMASS workflows, and DoD cloud accreditation processes.
• The ability to work through complex problems using applied technical knowledge, understanding, reasoning and interpretation.
• Proven experience managing security compliance for cloud-hosted solutions in Azure or similar environments.
• Strong understanding of DISA STIGs, NIST 800-53 controls, and vulnerability management processes.
• Familiarity with DevSecOps and Agile SDLC methodologies from a governance and compliance oversight perspective.
• Has in-depth understanding of technical principles, theories, concepts and their application across range of programs.
• Proven success in liaising with AOs, ISSMs, and system owners to navigate and expedite RMF-based accreditation efforts.
• Excellent written and verbal communication skills with the ability to brief complex security concepts to both technical and non-technical stakeholders.

Preferred Qualifications

• Bachelors degree Computer IS Systems, Cybersecurity, Information Assurance, or a related field and 12+ years of prior relevant experience as an ISSO or in a similar cybersecurity compliance oversight role supporting DoD systems or a Masters degree in Information Technology or related field and 10 years of prior relevant experience in cybersecurity compliance.
• Familiarity with supporting systems at multiple classification levels (e.g., Unclassified, Secret).

Please disregard the pay range listed on the posting. Positions will range from entry to experienced and the ranges here do not reflect each of those levels. Salary for each position will be determined by position, years of experience, and fit for the role.

Pay Range $131,300.00 - $237,350.00

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.