Senior IT Specialist - Information Security (InfoSec)

Supreme Court; Washington (District of Columbia); Hybrid; USD 110,000 - 155,000; Full time

Job summary

The Supreme Court's Office of Information Technology in Washington, DC, is seeking a full-time Information Systems Security Officer / Security Control Assessor to support cybersecurity governance and risk management programs.

Required: at least two years in an ISSO or SCA role and two additional years in IT or information security; familiarity with RMF, DISA STIGs, CIS Benchmarks, and related standards; strong written and verbal communication and teamwork are essential.

Qualifications

• At least two years of experience as an Information Systems Security Officer (ISSO) or Security Control Assessor (SCA).
• At least two additional years of applicable IT or information security experience.
• Experience implementing industry cybersecurity frameworks and concepts (RMF, DISA STIGs, CIS Benchmarks, ISO 27001, ATT&CK).
• Ability to develop, manage, and maintain SSP, SAR, POA&M, RAR, CMP, Contingency Plans, and PIA.

Skills

Strong communication

Customer service

Team collaboration

Excel

Word

Problem solving

IT security concepts

Job description

This is a full-time position with the Office of Information Technology at the Supreme Court of the United States in Washington, D.C.

Closing Date

Sunday, October 25, 2026 11:59 PM ET

At least two years of experience as an Information Systems Security Officer or Security Control Assessor, and at least two additional years of applicable Information Technology or Information Security experience.

• Knowledge and experience implementing industry cybersecurity frameworks and concepts, such as, Risk Management Framework, DISA STIGs, CIS Benchmarks. ISO 27001, ATT&CK framework, ISO/IEC 15026-2. Knowledge of network protocols (TCP/IP), common application protocols and port. Experience developing, managing, and implementing contingency plans.
• Experience in asset management and configuration management.
• Experience with protecting Personally Identifiable Information (PII).
• Ability to develop, implement, and maintain Information System ATO package artifacts. to include System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action & Milestones (POA&M), Risk Assessment Reports (RAR), Configuration Management Plans, Contingency Plans, and Privacy Impact Assessments (PIA).
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Strong communication skills, oral and written skills with the ability to create, manage, and prioritize tasks.
• High level of understanding operating systems, such as, Windows, Linux/Unix and command-line tools are desired but not required.

Required Competencies

• Strong customer service skills
• Proficiency with Microsoft Excel and Word are required
• Excellent written and verbal communication skills
• Ability to function as a team player in a fast-paced, team-oriented office environment.
• Ability to configure, update, and troubleshoot cellular devices and peripherals

Preferred Competencies

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager
• CompTIA Security+
• Certified Authorization Professional (CAP)
• Information Technology Infrastructure Library (ITIL)v3

Strong interpersonal communication skills, ability to communicate and understand technical information, comprehend technical instructions, evaluate problems, and assist users; ability to remain calm and professional in high stress environment when confronted with challenging situations, short timeframes, or other pressing and urgent requests.