The work

The Senior Information Systems Security Officer (ISSO) is responsible for overseeing and enhancing the security posture of enterprise information systems, ensuring strict compliance with federal regulations and organizational security policies. This role supports complex security programs and cloud‑hosted environments on AWS, requiring a seasoned professional with strong technical, analytical, and leadership capabilities.

With a minimum of 8 years of experience, the Senior ISSO leads the development, implementation, and maintenance of Authorization to Operate (ATO) packages, conducts comprehensive risk assessments, manages vulnerability analyses, and coordinates incident response activities. The ISSO engages with internal and external stakeholders to maintain continuous compliance and fosters a culture of cybersecurity awareness across the organization.

Key responsibilities:

• Develop, implement, and maintain ATO packages by documenting security controls, conducting risk assessments, performing vulnerability analyses, and ensuring adherence to federal standards (NIST, FISMA, FedRAMP)
• Lead risk assessments and mitigation strategies for both on‑premises and AWS cloud environments
• Coordinate incident response, including analysis, reporting, remediation, and stakeholder communication
• Serve as liaison with internal stakeholders and external entities to ensure continuous compliance and audit readiness
• Oversee security awareness training initiatives to help cultivate a strong security culture
• Maintain detailed documentation for security controls, audits, system authorization artifacts, and remediation activities

Technical expertise:

• Advanced knowledge of federal information security frameworks (NIST, FISMA, FedRAMP)
• Knowledge of AWS cloud services, including package management, IAM, encryption, configuration, and monitoring
• Proficiency with vulnerability management tools, SIEM platforms, and incident response technologies—Xacta preferred
• Strong understanding of network security concepts including firewalls, IDS/IPS, encryption, and endpoint protection
• Ability to analyze and interpret security logs, alerts, audit trails, and monitoring outputs
• Familiarity with secure software development practices and DevSecOps principles

Here’s what you need:

• Minimum 8 years of experience in information systems security, preferably in federal or defense environments
• Bachelor’s degree in Computer Science, Information Security, or a related field
• Excellent communication, leadership, and analytical skills
• Professional certifications strongly preferred: CISSP, CISM, AWS Security Specialty

Eligibility requirements:

• U.S. Citizenship required
• Active Top Secret clearance required (or ability to obtain and maintain)
• Commitment to daily in‑office attendance in Washington, DC