Information Systems Security Officer (ISSO)

General Dynamics - IT; Corridor North (MD); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

401K with company match

Competitive pay

Paid time off

Comprehensive benefits

Wellness program

Job summary

General Dynamics - IT is seeking an Information Systems Security Officer (ISSO) to safeguard enterprise infrastructure across classified domains. You will manage the security lifecycle for assigned systems, ensure RMF compliance, and maintain ongoing ATO readiness.

The role requires TS/SCI with CI Poly, a DoD 8140 certification, experience with RMF, NIST standards, and familiarity with Splunk. You’ll collaborate with engineers and operators to validate controls and support accreditation updates.

Qualifications

• Active RMF experience and ability to manage security lifecycle for systems.
• Familiarity with DoD 8140 Information Assurance Workforce certification requirements (e.g. Security+ CE).
• Strong understanding of NIST SP 800-37, 800-53, CNSSI 1253, and FISMA-aligned security practices.

Responsibilities

• Serve as the primary cybersecurity advisor on system security posture, threats, vulnerabilities, and compliance requirements.
• Maintain and update security authorization packages, documentation, and baseline artifacts throughout the system lifecycle.
• Ensure systems retain active Authority to Operate (ATO) through continuous monitoring, updates, and alignment with security policies.
• Develop and manage POA&Ms, risk acceptance requests, waivers, and exceptions for identified vulnerabilities.
• Perform periodic system reviews, update security controls, and coordinate required security-driven configuration changes.
• Audit system logs and monitors outputs to identify compliance issues or abnormal activity and coordinate remediation.
• Oversee secure system recovery, validating restoration of approved security configurations.
• Manage system decommissioning activities, ensuring secure sanitization and proper documentation.
• Collaborate with engineers, system owners, and technical teams to validate controls and support accreditation updates.

Skills

RMF experience

NIST knowledge

Security+ CE

Vulnerability management

Threat analysis

Communication

Education

Bachelor’s degree in IT-related field

Tools

Splunk

STIG tooling

Job description

INFORMATION SYSTEMS SECURITY OFFICER YOUR IMPACT

Own your opportunity to support national defense. Your work will help keep critical operations secure and connected across the global enterprise - directly, contributing to a mission that protects our nation every day. CIS is growing, and we invite both our experienced incumbents and new team members to be part of what’s next. Incumbents bring invaluable mission insight, while new talent adds fresh ideas and energy. Together, we’ll strengthen continuity and drive the next generation of innovation.

MEANINGFUL WORK AND PERSONAL IMPACT

As an Information Systems Security Officer (ISSO) supporting enterprise infrastructure services, you will safeguard critical information systems across multiple classified network domains. You will manage the full security lifecycle for assigned systems, ensure continuous compliance with cybersecurity standards, and help maintain resilient and secure mission enabling technologies. Your work strengthens system readiness, reduces risk, and ensures secure operations across globally distributed environments.

KEY RESPONSIBILITIES

• Serve as the primary cybersecurity advisor on system security posture, threats, vulnerabilities, and compliance requirements
• Maintain and update security authorization packages, documentation, and baseline artifacts throughout the system lifecycle
• Ensure systems retain active Authority to Operate (ATO) through continuous monitoring, updates, and alignment with security policies
• Develop and manage POA&Ms, risk acceptance requests, waivers, and exceptions for identified vulnerabilities
• Perform periodic system reviews, update security controls, and coordinate required security-driven configuration changes
• Audit system logs and monitors outputs to identify compliance issues or abnormal activity and coordinate remediation
• Oversee secure system recovery, validating restoration of approved security configurations
• Manage system decommissioning activities, ensuring secure sanitization and proper documentation
• Collaborate with engineers, system owners, and technical teams to validate controls and support accreditation updates

WHAT YOU’LL NEED TO SUCCEED

• Active TS/SCI clearance with CI Polygraph
• Bachelor’s degree in an IT-related field, or 10+ years of relevant IT experience in lieu of a degree
• Meet DoD 8140 Information Assurance Workforce certification requirements (e.g. Security+ CE)
• Hands-on experience performing ISSO functions under the Risk Management Framework (RMF)
• Strong understanding of NIST SP 800-37, 800-53, CNSSI 1253, and FISMA-aligned security practices
• Experience managing authorization package documentation, vulnerability assessments, and STIG compliance
• Ability to evaluate system risks, track remediation, and coordinate security efforts across engineering and operations teams
• Familiarity with enterprise security logging tools (e.g., Splunk) and vulnerability monitoring tools
• Strong communication, documentation, and collaboration skills

LOCATION: Onsite GDIT

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

Growth

AI-powered career tool that identifies career steps and learning opportunities

Support

An internal mobility team focused on helping you achieve your career goals

Rewards

Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

Community

Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward. #CIS