Senior Level Information Systems Security Officer (ISSO)

SHINE Systems; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

SHINE Systems is seeking a Senior Level Information Systems Security Officer (ISSO) to shape and advance cybersecurity initiatives across programs in the DC area.

The role requires 18+ years in security, cyber, or systems engineering, with an active TS/SCI with CI Poly clearance, and hands-on RMF/IATT/ATO experience. You will coordinate with program teams to ensure secure design, documentation, and ongoing compliance.

Qualifications

• 18+ years of experience in Security, Cyber, or Systems Engineering-related roles.
• Bachelor’s degree may substitute for 4 years; master’s for 6 years.
• Active TS/SCI with CI Poly clearance.

Responsibilities

• Conduct technical security assessments and contribute to secure systems.
• Ensure system security compliance, manage risks, and support certification activities.
• Collaborate with application leads, sysadmins, DBAs, developers and testers to maintain ATO.
• Respond to questions to ensure secure development with built-in security.
• Support security assessment events and coordinate with ISSMs and SCAs.
• Develop SSPs, POA&Ms, and other security artifacts using RMF/XACTA.
• Drive IATT and ATO efforts with stakeholders and the AO.
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Job description

SHINE Systems is hiring a Senior Level Information Systems Security Officer (ISSO) who will play a pivotal role in shaping and enhancing cybersecurity initiatives.

Position Responsibilities

• Conduct technical security assessments and contribute to the security systems.
• Ensure system security compliance, manage risks, and support certification activities throughout the program life cycle.
• Work with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from ISSMs and SCAs
• Develop and maintain SSPs, POA&Ms, and other required security documentation using XACTA.
• Drive IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust principles to secure data services, including identity, segmentation, and flow control.

Experience and Qualifications

To be eligible for this demanding position, the ideal candidate should demonstrate the following experience and qualifications:

Required Education and Years of Experience

• 18 Years of experience in Security, Cyber, or Systems Engineering roles or a highly related field of work with similar scope and responsibilities.
• A bachelor’s degree may be substituted for 4 years of experience and a master’s degree may be substituted for 6 years of experience.

Required Qualifications

• Security+ or other IAT II/III level certification that is currently active.
• Proficiency with XACTA and RMF process, including managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
• Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.
• TS/SCI with CI Poly government clearance

Desired Qualifications

• Prior Information System Security Officer or Information System Security Engineer experience.
• Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
• Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
• Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.

Work Location(s)

Annapolis Junction, MD; Washington, DC; or Reston, VA area preferred

Determination

The final salary offered will be based on the awarded contract funding and the selected candidate’s experience, education, and geographic location.

SHINE Systems is an Equal Employment/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, or veteran status, or any other protected class by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.