ISSO Information Systems Security Officer Lead

The Regional Municipality of Durham; Camp Springs (MD); On-site; USD 126,000 - 228,000; Full time

Job summary

A leading company seeks an ISSO Lead to oversee vulnerability management at Joint Base Andrews, MD. The role demands expertise in risk management, compliance, and team leadership in a high-stakes environment supporting national defense missions. Successful candidates will have extensive experience, a DoD Secret clearance, and the ability to thrive in a fast-paced setting.

Qualifications

• 12+ years of relevant experience or 10+ years with a Master's.
• Active DoD Secret clearance required.
• Expert knowledge of NIST standards and risk assessments.

Responsibilities

• Lead monitoring and maintenance of ACAS for compliance.
• Direct vulnerability analysis and reporting to program manager.
• Ensure quality and accuracy of contract deliverables.

Skills

Risk Management Framework (RMF)

Vulnerability assessments

Technical writing

Project Management

Communication

Configuration Management

Education

Bachelor's degree

Master's degree

Tools

ACAS (Tenable Nessus)

STIGViewer

Powershell

Python

Job description

Leidos Digital Modernization Sector has a career opportunity for an ISSO Lead to support the Air Force National Capital Region IT Services program.

The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.

If this sounds like the kind of environment where you can thrive, keep reading!

Digital Modernization - Delivering enterprise IT, digital modernization and cyber capabilities to meet critical Air Force, Space Force and Defense Agency operational and mission objectives.

Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!

POSITION SUMMARY:

This position will be the Vulnerability Management Team lead for ISSO supporting staff that provide ACAS Analysis and remediation. The position is 100% on-site at Joint Base Andrews, MD and will oversee and direct the work of individuals spanning the Pentagon, JBA, and JBAB.

PRIMARY RESPONSIBILITIES:

• Lead team in monitoring and maintaining ACAS (Tenable Nessus/Security center/ Nessus Manager) for CORA (formerly CCRI) compliance
• Ensuring Weekly on time delivery of Vulnerability analysis.
• Coordinate with DAOs, System Owners, SAs and ISSM for Security relevant changes to PMOs.
• Ensure maintenance of POAM via ELICSAR
• Conduct analysis of the Security Impact Analysis of changes to the network environment/ ATO.
• Provide RMF subject matter expertise to the team and government customer.
• Maintain eMASS Posture
• Determine the 800-53 Control Status for multiple ATOs
• Create the SAR, maintain eMASS POAMs and ATO packages
• Ensure assessment and authorization packages are completed in accordance with projected timelines and in alignment with customer requirements.
• Provide reporting to the program manager and convey top-down information back to the team.
• On-time submission of contract deliverables with special attention to quality and accuracy.
• Monitor, track, and report on daily and weekly activities conducted by the ISSO team.
• Evaluate configuration management (CM) for information system security software, hardware, and firmware.
• Evaluate relevant STIGs and ACAS scans for systems that are implementing a change.

BASIC QUALIFICATIONS:

• Bachelor's degree and 12+ years of prior relevant experience or Masters with 10+ years of prior relevant experience, additional years of applicable experience may be considered in lieu of a degree.
• eMASS experience.
• An active DoD Secret clearance.
• DoD 8140 ISSM role (i.e. Comptia Security+).
• Expert knowledge of NIST SP 800-37, and NIST SP 800-53 and DoD policies such as 8510.01 and procedures.
• Expert knowledge and performance of risk and vulnerability assessments for the purpose of change management (SIA).
• POAM management.
• Expert in RMF and authorization processes and procedures.
• Experience with security infrastructure design and implementation.
• Experience in policy implementation within an organization.
• Project Management skills.
• Technical writing skills to include SOP, Work Instructions, and preparing senior level briefs.
• Experience with STIGViewer and DISA STIGs.
• Familiarity With Nessus/ACAS.
• Familiarity with Powershell/Python.

PREFERRED QUALIFICATIONS:

• DoD 8140 ISSM Experienced role (i.e. ISC2 CISSP).
• Ability to communicate orally, and in writing, detailed technical information.
• Experience supporting AFNCR, DoD,DISA, or other programs at the Pentagon.
• Excellent project, technical and problem management skills.

Original Posting:
May 15, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:
Pay Range $126,100.00 - $227,950.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.