Information Systems Security Officer (ISSO)

maxar; Herndon (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Vantor is seeking an Information Systems Security Officer (ISSO) to support secure, compliant, mission-focused systems serving OBI requirements and knowledge graphs. You will collaborate with government stakeholders, ISSM, engineers, and DevSecOps teams to implement controls and manage risk across the system lifecycle.

The ideal candidate has RMF experience, strong security documentation skills, and the ability to work in Agile environments while ensuring compliance with applicable requirements.

Qualifications

• Must be a U.S. citizen and possess an active TS/SCI clearance with CI polygraph.
• Experience working as an ISSO/ISSM/security analyst or similar information assurance role.
• Experience supporting RMF activities.

Responsibilities

• Support security programs for classified information systems throughout the system lifecycle.
• Assist RMF activities including system categorization, control implementation, and authorization support.
• Develop and maintain security documentation (SSPs, POA&Ms, BIA, contingency plans).
• Coordinate with ISSM, ISSE, system owners and Government security personnel on requirements and risks.
• Monitor security posture and ensure controls are implemented, tested, and maintained.
• Track vulnerabilities, POA&Ms, findings, and remediation actions through closure.
• Support security testing, vulnerability scanning, and remediation efforts.

Skills

RMF process

Security documentation

Vulnerability management

Agile/DevSecOps

Security incident response

Job description

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what's happening now and shape what's coming next. Vantor is a place for problem solvers, changemakers, and go-getters-where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world.

To be eligible for this position, you must be a U.S. Citizen. This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status.

Export Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).

Please review the job details below.

This position requires an active U.S. Government security clearance at the TS/SCI level with CI polygraph.

Vantor is seeking an Information Systems Security Officer (ISSO) to support secure, compliant, and mission-focused systems serving Object-Based Intelligence (OBI) requirements, enterprise ontologies, knowledge graphs, semantic data integration, and advanced analytics.

The ISSO will support the security authorization, operation, and continuous monitoring of information systems throughout the system development and operational lifecycle. This position will work closely with Government stakeholders, the Information Systems Security Manager (ISSM), security engineers, system owners, developers, DevSecOps personnel, data engineers, and mission users to implement security controls, manage risk, and ensure systems remain compliant with applicable security requirements.

The ideal candidate is experienced in Risk Management Framework (RMF) activities, security documentation, vulnerability management, continuous monitoring, incident response, and working in Agile or DevSecOps environments.

Responsibilities:

• Support the implementation and maintenance of security programs for classified information systems throughout the system lifecycle.
• Support RMF activities, including system categorization, control implementation, assessment preparation, authorization support, and continuous monitoring.
• Develop, maintain, and update security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security assessment materials, contingency plans, configuration management documentation, and related artifacts.
• Coordinate with the ISSM, Information System Security Engineer (ISSE), system owners, Government security personnel, and Authorizing Official representatives to address security requirements and risks.
• Monitor system security posture and ensure security controls are implemented, documented, tested, and maintained.
• Track vulnerabilities, POA&M items, security findings, configuration issues, and corrective actions through closure.
• Support vulnerability scanning, compliance assessments, security testing, penetration testing, and remediation activities.
• Review system changes, software releases, infrastructure updates, and configuration modifications for security and compliance impacts.
• Partner with DevSecOps, software development, platform, cloud, data, and infrastructure teams to integrate security throughout the development and deployment lifecycle.
• Support secure implementation of enterprise ontologies, knowledge graphs, semantic data services, APIs, data integrations, and mission applications.
• Monitor security-relevant events, logs, alerts, and system activity; support investigation, documentation, escalation, and reporting of security incidents.
• Support incident response, cybersecurity event handling, and coordination with Government security and cybersecurity organizations.
• Prepare for and support security inspections, audits, authorization reviews, and Government assessments.
• Ensure system users, administrators, and project personnel complete required security training and comply with established security procedures.
• Provide security guidance to technical teams and stakeholders while balancing mission needs, operational risk, and compliance requirements.
• Maintain accurate security records, metrics, status reports, and briefings for technical leadership and Government stakeholders.
• Participate in Agile ceremonies, technical reviews, operational demonstrations, release planning, and change management activities as needed.
• Support knowledge transfer and provide security guidance to Government personnel and project team members.

Minimum Qualifications:

Must be a U.S. citizen and possess an active TS/SCI clearance with CI polygraph. Demonstrated experience working as an ISSO, Information System Security Manager, security analyst, cybersecurity analyst, or in a similar information assurance role. Experience supporting RMF activi