Information Systems Security Officer (ISSO) Mid-Level

United Launch Alliance, LLC.; Centennial, Northern (CO, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

ULA seeks a mid-level Information System Security Officer (ISSO) to provide RMF/ATO support and day-to-day IA for classified systems supporting Aerospace & Defense programs.

You’ll lead control implementation, continuous monitoring, POA&Ms, and audit readiness, coordinating with program management, IT operations and security leadership to ensure confidentiality, integrity and availability across the system lifecycle.

Qualifications

• Active TS/SCI with CI Poly is required.
• Bachelor’s degree in Cybersecurity, Computer Science, or related field; equivalent experience considered.
• Experience with RMF/ATO and IA processes.

Responsibilities

• Lead RMF/ATO activities across the full lifecycle.
• Develop and maintain RMF artifacts (SSP, SAP/SAR, POA&Ms).
• Support ATO package preparation and evidence collection.
• Coordinate with IA leadership and program customers to maintain ATO readiness.

Skills

RMF knowledge

IA / information assurance

Incident response

Cross-functional collaboration

Education

Bachelor’s degree

Tools

RMF tools

Vulnerability scanning tools

Log aggregation tools

Job description

Information Systems Security Officer (ISSO) Mid-Level

Relocation:Yes- Relocation may be available

Travel Requirements:10%

At ULA, success comes through the efforts of a strong, united team.

Thanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together. As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world. Our team is excited to meet you!

Job Overview & Responsibilities

Overview

ULA is seeking a mid-level Information System Security Officer (ISSO) to provide comprehensive Risk Management Framework (RMF)/Authority to Operate (ATO) support and day-to-day Information Assurance (IA) for classified systems supporting Aerospace & Defense programs. In this role, you’ll steward system cybersecurity across its lifecycle—leading control implementation, continuous monitoring, POA&M management, and audit/readiness activities to achieve and maintain Authority to Operate (ATO) under DoD and IC policies. You’ll collaborate with program management, program engineering, IT ops, security leadership and program customers to ensure mission systems meet stringent confidentiality, integrity, and availability requirements.

Responsibilities:

RMF / ATO Support

• Execute and document all RMF activities across the full lifecycle in accordance with DoDI 8510.01, NIST SP 80053, CNSSI 1253, JSIG/ICD 503, and customer‑ specific‑ guidance.
• Develop and maintain RMF artifacts including the SSP, SAP/SAR, POA&Ms, Contingency Plans, IR Plans, and related IA documentation.
• Support ATO package preparation and submission using government customer RMF/IA tools for evidence upload, workflow tracking, and assessor interactions.
• Implement, assess, and validate security controls; support control tailoring and inheritance strategies.
• Perform continuous monitoring using government approved‑ compliance scanning tools:
  • Vulnerability scanning tools
  • STIG/SRG-based configuration validation
  • Automated compliance assessments
• Maintain system baselines, secure configurations, asset inventories, and IA-related change documentation.
• Support audit readiness and assist with customer inspections, CCRI-type events, and periodic cybersecurity evaluations.
• Track, manage, and drive closure of POA&Ms and risk items.

Secure Operations & Incident Response

• Provide day-to-day IA support for classified systems, including boundary analysis, system configuration reviews, and data handling oversight.
• Support event detection and response activities using government customer log aggregation tools, ensuring accurate log capture, retention, and reporting.
• Participate in incident response coordination with Contractor Program Security Officer (CPSO) in accordance with customer and organizational procedures.
• Guide engineering and operations teams on secure design principles, system changes, and cybersecurity impacts.
• Maintain risk tracking, document deviations and mitigations, and communicate system risk posture to IA leadership and stakeholders.
• Support policy compliance, user training, secure handling, insider threat awareness, and governance activities.
• Coordinate with AOs, SCAs, customer cybersecurity offices, and program security personnel.

Required Education

Bachelor

Required Years of Experience

Minimum of 4 years of related work experience

Basic Qualifications

• Active TS/SCI with CI Poly and ability to maintain eligibility. U.S. Citizenship required
• Bachelor’s degree in Cybersecurity, Computer Science, or related field; equivalent experience considered