Information System Security Officer (ISSO)

Information System Security Officer (ISSO) #26-00052 Gaithersburg, MD – Onsite Location: Gaithersburg, MD Required Clearance: TS/SCI with Polygraph Employment Type: Full-Time Regular Shift: Day Travel: No Relocation Assistance: Yes Position Overview Ennoble First is seeking an Information System Security Officer (ISSO) to support mission‑critical intelligence systems within the Analysis Sustainment portfolio. The ISSO will manage authorizations and risks related to the processing, storage, and transmission of information while ensuring compliance with government and corporate cybersecurity requirements. The ISSO will support Assessment and Authorization (A&A) activities, vulnerability management, continuous monitoring, security documentation, and risk mitigation efforts while partnering with system owners, administrators, engineers, and government stakeholders to maintain the security posture of critical mission systems. Primary Responsibilities Develop risk mitigation strategies that contribute to the effectiveness, efficiencies, and performance outcomes for strategic projects, program goals, and business processes. Quickly respond to the needs for updates and maintenance of security documentation, including System Security Plans, Plans of Actions and Milestones (POA&Ms), Security Impact Assessments for proposed system changes, and Concept of Operations. Maintain system security plans and related configuration records in Customer Service+, XACTA‑360, and security management tools. Drive necessary security changes through steering groups and control review boards to meet Risk Management milestones. Work independently and collaboratively to drive security process improvements and address gaps in meeting customer security requirements and due diligence responsibilities. Provide guidance and engage technical teams to implement secure software and hardware processes, government security standards, and industry best practices. Resolve highly complex security problems by applying technical knowledge and interpreting requirements. Communicate with program leadership and customer stakeholders regarding matters of significant importance to the organization and project. Apply an in‑depth understanding of information security principles, theories, concepts, and their application across a range of programs. Develop and maintain security documentation in accordance with NGA, Intelligence Community, DoD, DISA, NIST, and industry standards. Initiate and coordinate A&A and renewal activities with Designated Authorizing Officials and supporting organizations. Address Information Assurance and Cybersecurity notices, orders, taskings, and directives in accordance with vulnerability and patch management processes. Measure effectiveness of defense‑in‑depth architectures and Zero Trust implementations against known vulnerabilities. Perform security audits and assessments, including creation, tracking, and remediation support for POA&Ms. Coordinate with System Administrators and technical teams to remediate vulnerabilities, track findings, and document mitigation activities. Update Security CONOPS and Information Technology Disaster Recovery (ITDR) plans. Manage security profiles and implementation activities for systems and services scheduled for Assessment and Authorization. Work closely with Systems Engineers, Administrators, ISSMs, security teams, and stakeholders to maintain security plans and associated documentation. Maintain records and documentation related to system upgrades, patches, and connectivity configurations. Evaluate security solutions and implementation strategies while maintaining the operational security posture of development, integration, and deployed capabilities. Provide training and approve user access and identification, authorization, and authentication mechanisms for information systems. Required Qualifications BS degree and 8 to 12 years of prior relevant experience. Active TS‑SCI clearance with Polygraph. Understanding and application of the ICD‑503 and NIST risk management framework. Experience developing, maintaining, and updating RMF security documentation (SSPs, POA&Ms, SIAs, CONOPS, A&A artifacts). Experience supporting system accreditation activities, security control assessments, continuous monitoring, vulnerability remediation, and authorization efforts within NIST RMF and/or ICD‑503 environments. Experience with XACTA, XACTA 360 (preferred), HBSS, ACAS, Nessus, SPLUNK. Preferred Qualifications Experience with NGA. 3+ years of experience analyzing and resolving vulnerability scan results using Nessus, Tenable Security Center, or comparable tools. Active CISSP or CISM certification. Intelligence Community experience. Pay Range $135,000–$160,000 Equal Employment Opportunity Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law. Diversity Statement Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. E‑Verify Participation Ennoble First participates in E‑Verify. Learn more at E‑Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E‑Verify in its hiring practices to achieve a lawful workforce. #J-18808-Ljbffr