Senior Information Systems Security Officer (ISSO)

DAn Solutions, Inc.; Maryland; On-site; USD 162,000 - 198,000; Full time

Job summary

DAn Solutions, Inc. seeks a Senior Information Systems Security Officer (ISSO) to support a federal intelligence community program. The role focuses on cybersecurity, risk management, and certification activities across the program lifecycle.

On-site opportunities are available in Annapolis Junction, MD, Washington, DC, or Reston, VA. The ideal candidate holds active TS/SCI with poly and Security+ or equivalent IAT II/III certification, with hands-on experience in RMF, XACTA, ATO processes, and

Qualifications

• Active TS/SCI security clearance with an active polygraph.
• Current Security+ certification or equivalent IAT Level II/III certification.
• Proficiency with XACTA and the RMF, including management of IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architectures against applicable security frameworks, including ICD 503.
• Experience creating and maintaining SSPs, SAPs, POA&Ms, and security artifacts.
• Experience coordinating with ISSMs, ISSEs, system owners, and authorizing officials.

Responsibilities

• Conduct technical security assessments of computing environments and support cybersecurity initiatives.
• Ensure system security compliance, identify and manage risks, and support certification and authorization activities throughout the program lifecycle.
• Work with application leads, system administrators, database admins, developers, and testers to ensure systems achieve and maintain ATO.
• Provide security guidance to development and engineering teams to embed security into design and development.
• Support security assessment events and respond to questions from ISSMs and SCAs.
• Develop and maintain SSPs, POA&Ms, and other required security docs using XACTA.
• Coordinate IATT and ATO activities with cybersecurity stakeholders and AOs.
• Implement and validate NIST SP 800-53 controls in DPaaS environments.
• Apply Zero Trust principles to data services, including identity management and segmentation.

Skills

Security clearance TS/SCI with poly

Security+ or IAT II/III

XACTA RMF

Splunk

ATO coordination

Zero Trust principles

Education

18 years of security/cybersecurity experience

Bachelor's degree may substitute for 4 years

Master's degree may substitute for 6 years

Tools

XACTA

RMF

ATO processes

NIST SP 800-53 controls

Splunk

Job description

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH POLYGRAPH - NO REMOTE WORK

Seating available in Annapolis Junction, MD Washington, DC or Reston, VA

DAn Solutions is seeking a Senior Information Systems Security Officer (ISSO) to support a federal intelligence community program. In this role, you will play a pivotal part in shaping and enhancing cybersecurity initiatives, ensuring system security compliance, managing risks, and supporting certification and authorization activities throughout the program lifecycle.

The ISSO will collaborate closely with application leads, system administrators, database administrators, developers, testers, and cybersecurity stakeholders to ensure systems are developed and maintained in accordance with applicable security requirements.

Key Responsibilities

• Conduct technical security assessments of computing environments and support cybersecurity initiatives.
• Ensure system security compliance, identify and manage risks, and support certification and authorization activities throughout the program lifecycle.
• Work closely with application leads, system administrators, database administrators, developers, and testers to ensure assigned systems achieve and maintain Authorization to Operate (ATO).
• Provide security guidance to development and engineering teams to ensure security compliance is incorporated into system design and development.
• Support security assessment events and respond to questions and findings from Information System Security Managers (ISSMs) and Security Control Assessors (SCAs).
• Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other required security documentation using XACTA.
• Coordinate Interim Authorization to Test (IATT) and ATO activities with cybersecurity stakeholders and Authorizing Officials (AOs).
• Implement and validate NIST SP 800-53 security controls in cloud-native Data Platform as a Service (DPaaS) environments.
• Apply Zero Trust security principles to data services, including identity management, segmentation, and flow control.

Required Qualifications

• Active TS/SCI security clearance with an active polygraph.
• Current Security+ certification or equivalent IAT Level II/III certification.
• Proficiency with XACTA and the Risk Management Framework (RMF), including management of IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architectures against applicable security frameworks, including ICD 503.
• Experience implementing and maintaining system security documentation, including SSPs, Security Assessment Plans (SAPs), POA&Ms, and security assessment artifacts.
• Experience coordinating with ISSMs, Information System Security Engineers (ISSEs), system owners, and authorizing officials.

Education and Experience

• 18 years of experience in security, cybersecurity, systems engineering, or a closely related field with comparable scope and responsibilities.
• A bachelor's degree may substitute for four years of experience.
• A master's degree may substitute for six years of experience.

Preferred Qualifications

• Previous experience as an ISSO or ISSE.
• Demonstrated success leading cybersecurity initiatives on significant or large-scale programs.
• Experience managing or coordinating cybersecurity teams.
• Strong communication skills, including experience engaging with customers, program leadership, engineers, and other technical stakeholders.
• Ability to communicate complex cybersecurity concepts and strategies effectively.

Additional Information

This position requires primarily on-site support at a designated program location. Candidates must meet all applicable security clearance and certification requirements.

Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications.

Salary: $180000 per year