Senior ISSO | TS/SCI + Full-Scope Poly | Cybersecurity Lead

2HB Incorporated; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

2HB Incorporated is seeking a Sr. Information Systems Security Officer to support a government customer in Annapolis Junction, MD. This is a full-time role requiring a TS/SCI/Full Scope Polygraph Clearance.

You will lead cybersecurity activities, develop security architectures, assess IT systems, and ensure compliance with frameworks (ICD 503, RMF). Strong writing and communication skills, Linux and cloud security experience (AWS, Azure) are essential.

Qualifications

• Experience with RMF/DIACAP-like processes and RMF-based assessment and authorization.
• Ability to develop and maintain system security documentation and SOPs.
• Strong Linux operating system knowledge and cloud service security exposure.
• Familiarity with security assessment tools (e.g., Nessus).
• Experience with government security frameworks and policies.

Responsibilities

• Assess existing IT architecture for compliance with security requirements.
• Develop IT security policies, standards, and guidance.
• Support A&A process activities and documentation.
• Provide engineering support for authorization/test and evaluation activities.
• Provide continuous monitoring for information systems.
• Develop security deliverables for operations and development.
• Evaluate security architectures against compliance objectives.
• Identify, track and mitigate vulnerabilities.
• Understand government cybersecurity policies and RMF requirements.
• Communicate effectively to executives and technical staff.

Skills

RMF processes

A&A documentation

Security architectures

Linux

Cloud security

Nessus

Xacta

CISSP

Policy writing

Communication

Tools

Xacta

LatteArt

Job description

2HB Incorporated is seeking a Sr. Information Systems Security Officer to support a government customer in Annapolis Junction, MD. This is a full-time role requiring a TS/SCI/Full Scope Polygraph Clearance.

You will lead cybersecurity activities, develop security architectures, assess IT systems, and ensure compliance with frameworks (ICD 503, RMF). Strong writing and communication skills, Linux and cloud security experience (AWS, Azure) are essential.