Information System Security Officer

Information System Security Officer

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Jacobs is looking for an Information System Security Officer to join our Sensor Processing Team. Candidates must have a strong Information Assurance/Security background and be capable of coming up to speed on all ICD 503 computing security responsibilities and IA actions. Candidates must have good communication and problem-solving skills, and the ability to work both independently and collaboratively in a team environment as required.

Duties/Tasks and Responsibilities:

• Perform all ISSO related duties as required by ICD 503, applicable NRO, IC, DoD policies, procedures and operating instructions related to information Technology, Information Assurance, Information Management (IT/IA/IM)
• Manage the day-to-day system security including physical and environmental protection, incident handling, and information system security training and awareness.
• Maintain the system security plan (SSP), and other related documents, following NRO, IC, and DoD applicable policies, procedures, and templates.
• Maintain and update asset record in SNOW
• Perform continuous monitoring (ConMon) and periodic self-inspections of information systems to ensure security compliance
• Review Nessus security scans, communicate vulnerabilities to technical stakeholders, and perform remediation
• Support customer responses to ongoing information system audits and reviews in accordance with established schedules
• Ensure change control requirements are documented and tracked
• Monitor and track status of applicable patches including IA Vulnerability Alerts (IAVA), IA Vulnerability Bulletins (IAVB) and Technical Advisories (IA) for the information system.
• Conduct periodic reviews of Privileged User (PU) accounts (Developer, Admin, etc.)
• Assist in the creation of new policies/procedures as needed
• Perform Configuration and Change Management for the security relevant IS software, hardware, and firmware, Event Management, Vulnerability Management, Security Incident Management, POA&M Management, Reauthorization, and Decommissioning of IT asset environments
• Maintain Approval to Operate (ATO), including the resolution of any Plans of Action & Milestones (POA&M) documents
• Maintain and validate account and vulnerability management
• Control, label, virus scan, and appropriately transfer data (uploading/downloading) between various information systems as required and Portable Electronic Device (PED) registrations and tracking.
• Provide security design guidance and analysis to the project team throughout the RMF process
• Perform reviews of technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommended mitigation strategies
• Develop and maintain a Data Loss Prevention process to investigate, track, and mitigate security incidents.
• Responsible for implementing and maintaining security services tools within the Risk Management Framework (RMF).
• Maintain effective communication with the ISO, AO or DAO, ISSE, SCA ISSM and CPSO
• Provide briefings on the security posture and compliance status of assigned system(s) to Security Management

Here's what you'll need:

• Current CISSP, CompTIA Security+ CE cert, OR CASP+ CE certification
• Experience with ServiceNow, and Security Center (SC)
• Experience with HBSS, EVSS, AND/OR EITA bundle onboarding functions and corresponding tool suite
• Possess skills including organizing, scheduling, conducting, and coordinating work assignments to meet project milestones or established completion dates.
• Self-starter who is proactive, efficient with their time, and able to prioritize tasks on a daily basis.
• Experience with computer networks, applications, processes and accesses.
• Be customer-focused and possess the ability to identify issues, analyze, and interpret data and develop solutions to a variety of moderately complex technical problems.
• Demonstrate strong interpersonal skills to effectively interface with all levels of employees and be able to represent the organization as a knowledgeable resource.
• Thorough working knowledge of all applicable NRO, IC, DoD policies, procedures and operating instructions related to Information Technology, Information Assurance, Information Management (IT/IA/IM).
• Top Secret/SCI security clearance with a CI Poly
• Bachelor's Degree and 8 years of work experience or equivalent such as Associate's and 12 years or master's degree and 5 years' experience.

The base salary range for this position is $150,000.00 to $170,000.00. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. Job posted on June 08, 2026. This position will be open for at least 3 days.

Onsite employees are expected to attend a Jacobs Workplace on a full-time basis, as required by the nature of their role.

Your application experience is important to us, and we're keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support.

Locations

Chantilly - Virginia - United States