Information System Security Officer (ISSO) – TS/SCI Full Scope Poly – Annapolis Junction, MD

Information System Security Officer (ISSO) – TS/SCI Full Scope Poly

📍 Location: Annapolis Junction, MD
🏢 Work Arrangement: 100% Onsite
💼 Employment Type: Full-Time
🔒 Security Clearance Required: Active TS/SCI with Full Scope Polygraph (NSA Preferred)
🇺🇸 Citizenship: U.S. Citizen Required
🚫 Visa Sponsorship: Not Available
🚚 Relocation Assistance: Available
💰 Compensation: $100,000 – $200,000 Base Salary

Overview

A leading government technology contractor is seeking Information System Security Officers (ISSOs) to support mission-critical classified programs within highly secure government environments.

This role is responsible for maintaining cybersecurity compliance throughout the Risk Management Framework (RMF) lifecycle, supporting system accreditation, continuous monitoring, vulnerability management, and ongoing cybersecurity operations.

The ideal candidate will possess strong RMF expertise, experience supporting classified environments, and the ability to work closely with System Administrators, System Owners, Information System Security Managers (ISSMs), Security Control Assessors, and Government stakeholders.

Key Responsibilities

Risk Management Framework (RMF)

• Support the full RMF lifecycle for classified systems.

• Develop and maintain RMF documentation and accreditation packages.

• Coordinate Authority to Operate (ATO) activities.

• Support security authorization and reauthorization efforts.

• Ensure systems maintain compliance with cybersecurity requirements.

Security Compliance & Assessments

• Conduct security control reviews and assessments.

• Validate implementation of required security controls.

• Monitor compliance against NIST and government standards.

• Support internal and external cybersecurity audits.

Continuous Monitoring (ConMon)

• Support ongoing Continuous Monitoring activities.

• Review system configurations and compliance posture.

• Analyze vulnerability findings and remediation efforts.

• Track compliance status and corrective actions.

Vulnerability & Risk Management

• Monitor vulnerabilities and security findings.

• Coordinate remediation efforts with technical teams.

• Assess risk and recommend mitigation strategies.

• Support vulnerability management programs.

Stakeholder Collaboration

• Work closely with:

• System Administrators

• System Owners

• ISSMs

• Security Control Assessors

• Government Security Teams

• Provide security guidance and compliance recommendations.

• Support cybersecurity reviews and inspections.

Required Qualifications

Security Requirements

✔ Active TS/SCI Clearance

✔ Active Full Scope Polygraph (NSA Preferred)

✔ U.S. Citizenship Required

Cybersecurity & RMF Experience

Experience supporting:

• Information Assurance (IA)

• Cybersecurity Compliance

• ISSO Functions

• Classified Information Systems

Strong understanding of:

• Risk Management Framework (RMF)

• Authority to Operate (ATO)

• Security Control Assessments

• Continuous Monitoring (ConMon)

• Risk Assessment Methodologies

RMF & Compliance Tools

Experience with one or more of:

• LATTEART

• XACTA

• BISCOTTI

• WATCHCAT

• STE

Experience with:

• Compliance scanning tools

• Configuration assessment tools

• Vulnerability management platforms

NIST Framework Knowledge

Strong familiarity with:

• NIST SP 800-53 Rev. 3 and/or Rev. 5

• NIST SP 800-37

• Security Controls

• RMF Documentation Requirements

Required Documentation Experience

Candidates should have experience creating, reviewing, or maintaining:

Security Documentation

• System Security Plans (SSP)

• Plans of Action & Milestones (POA&M)

• Security Plan Findings (SPF)

• Exception Documentation

Risk & Compliance Documentation

• Risk Assessment Reports (RAR)

• Security Assessment Reports (SAR)

• Business Impact Assessments (BIA)

• Configuration Management Plans (CMP)

• Contingency Plans (CP)

• After Action Reports (AAR)

Preferred Qualifications

Government & Classified Environment Experience

• Classified Government systems

• Security audits and inspections

• Compliance reviews

• Vulnerability remediation programs

Stakeholder Coordination

Experience coordinating with:

• Authorizing Officials (AO)

• Security Control Assessors (SCA)

• ISSMs

• System Owners

Technical Knowledge

• Operating System Security

• System Administration Concepts

• Vulnerability Management

• Configuration Management

Preferred Certifications

Highly desired certifications include:

• CompTIA Security+

• CISSP

• CAP

• CASP+

• CISM

Must-Have Requirements

Clearance

✅ Active TS/SCI Clearance

✅ Active Full Scope Polygraph

Cybersecurity

✅ RMF Experience

✅ ATO Experience

✅ Continuous Monitoring (ConMon)

✅ Security Control Assessments

Documentation

✅ SSP Development

✅ POA&M Management

✅ Security Compliance Documentation

Soft Skills

✅ Strong Written Communication

✅ Strong Organizational Skills

✅ Risk-Based Decision Making

✅ Collaboration & Stakeholder Management

Screening Questions

1. Do you currently hold an active TS/SCI clearance with a Full Scope Polygraph?

2. Was your Full Scope Polygraph issued by NSA?

3. When was your most recent Full Scope Polygraph completed?

4. How many years of ISSO, Information Assurance, or Cybersecurity compliance experience do you have?

5. Have you supported the full RMF lifecycle, including ATO activities?

6. Which RMF compliance tools have you used (XACTA, LATTEART, BISCOTTI, WATCHCAT, STE)?

7. Have you developed or maintained SSPs, POA&Ms, SARs, or RARs?

8. What experience do you have with NIST 800-53 and NIST 800-37?

9. Do you have experience supporting classified Government systems?

10. Do you hold any cybersecurity certifications such as Security+, CISSP, CAP, CASP+, or CISM?

Ideal Candidate Profile

The ideal candidate will:

• Hold an active TS/SCI Full Scope Polygraph.

• Have strong ISSO or Information Assurance experience within classified environments.

• Possess deep knowledge of RMF, ATO, and Continuous Monitoring processes.

• Be highly detail-oriented and documentation-focused.

• Have experience working with government cybersecurity compliance tools.

• Understand vulnerability management and risk mitigation practices.

• Effectively collaborate with technical and non-technical stakeholders.

• Balance mission requirements with cybersecurity compliance obligations.

Candidate Snapshot

Requirement

Details

Clearance

Active TS/SCI + Full Scope Poly

Citizenship

U.S. Citizen

Experience Level

Mid-Level to Senior

Frameworks

RMF, NIST 800-53, NIST 800-37

Compliance

ATO, ConMon, Security Controls

Documentation

SSP, POA&M, SAR, RAR, CMP, CP

Tools

XACTA, LATTEART, BISCOTTI, WATCHCAT, STE

Certifications

Security+, CISSP, CAP, CASP+, CISM (Preferred)

Location

Annapolis Junction, MD

Work Arrangement

100% Onsite

Travel

None

Compensation

$100K – $200K

Relocation

Available

Why This Opportunity?

Mission Impact

Support highly classified national security programs and critical government systems.

Cybersecurity Leadership

Play a key role in accreditation, compliance, risk management, and cybersecurity governance activities.

Career Growth

Work alongside highly skilled cybersecurity professionals supporting some of the nation's most sensitive environments.

Excellent Benefits

• 3 Weeks PTO

• 11 Federal Holidays

• Medical & Dental Coverage

• Life Insurance

• STD & LTD Coverage

• 401(k) with Company Match

• Long-Term Career Development

This opportunity is ideal for an ISSO, Information Assurance Analyst, Cybersecurity Compliance Analyst, RMF Analyst, Information Security Specialist, Security Control Assessor Support Specialist, or Cybersecurity Governance Professional with an active TS/SCI Full Scope Polygraph seeking to support mission-critical government programs.

SOC Analyst – Montvale, NJ | Hybrid Cybersecurity & Vulnerability Management

SOC Analyst

📍 Location: Montvale, New Jersey
🏢 Work Model: Hybrid – 3 days onsite / 2 days remote
🏠 Employees work remotely every Friday + receive 40 additional remote days annually
💼 Employment Type: Full-Time
📈 Seniority Level: Associate / Mid-Level
🎓 Education: Bachelor’s Degree preferred
🔐 Industry: Cybersecurity / Manufacturing / Enterprise IT

💰 Compensation & Benefits

• Salary Range: $90,000 – $110,000

• Full benefits package

• Hybrid flexibility

• Collaborative and supportive IT/security environment

🚀 Overview

A growing enterprise organization is seeking a SOC Analyst to strengthen its cybersecurity operations through security monitoring, alert investigation, and vulnerability management.

This role combines Security Operations Center (SOC) responsibilities with hands-on vulnerability analysis and remediation coordination across enterprise infrastructure and endpoint environments.

The ideal candidate is analytical, collaborative, proactive, and highly communicative with experience supporting enterprise security operations.

🔧 Key Responsibilities

Security Operations

• Monitor, triage, and investigate alerts from:

• SIEM platforms

• Endpoint protection tools

• Security monitoring systems

• Distinguish legitimate threats from false positives

• Document findings and communicate results clearly

• Assist with alert tuning and optimization efforts

Vulnerability Management

• Support enterprise vulnerability scanning and assessments

• Analyze vulnerability findings and prioritize remediation activities

• Research CVEs and provide:

• Exploitability analysis

• Business impact context

• Remediation guidance

• Track remediation progress and validate fixes

Collaboration & Communication

• Partner closely with:

• Infrastructure teams

• IT leadership

• Cybersecurity teams

• Maintain strong communication and visibility around risks and remediation efforts

• Proactively identify opportunities for improvement

Continuous Improvement

• Assist with:

• DLP and information protection controls

• System hardening initiatives

• Documentation and runbook development

• Explore enhanced capabilities within existing security tooling

✅ Required Qualifications

• Bachelor’s degree in:

• Cybersecurity

• Computer Science

• Information Technology

• Related discipline
  OR equivalent practical experience

• 3–5 years of experience in:

• Security operations

• Vulnerability management

• Endpoint protection analysis

• Strong understanding of:

• CVEs

• Risk prioritization

• Vulnerability remediation processes

• Excellent communication and collaboration skills

⭐ Preferred Skills

• Experience with:

• SIEM platforms

• Enterprise log analysis

• Endpoint detection & response (EDR) tools

• Familiarity with:

• Active Directory

• Group Policy

• Security baselines

• Scripting or reporting experience:

• PowerShell

• Python

• Power BI

• Security certifications are a plus but not required

🎯 Ideal Candidate

• Hands-on SOC or cybersecurity analyst with enterprise experience

• Strong communicator who proactively keeps stakeholders informed

• Comfortable balancing:

• Security investigations

• Vulnerability analysis

• Cross-functional collaboration

• Curious, self-driven, and eager to improve security operations

📝 Screening Considerations

• Do you have experience with:

• SOC operations

• Vulnerability management

• Endpoint security tools?

• Have you worked with SIEM or enterprise detection platforms?

• Are you comfortable working in a hybrid environment in Montvale, NJ?

• Do you have experience coordinating remediation efforts with infrastructure teams?

🌍 Work Environment

• Hybrid work schedule:

• 3 onsite days

• 2 remote days

• Additional remote flexibility throughout the year

• Collaborative enterprise IT and cybersecurity team

• Occasional travel between NY/NJ locations may be required

📈 Why Join

• Broad exposure across enterprise cybersecurity operations

• Opportunity to influence security tooling and processes

• Supportive, highly collaborative IT culture

• Strong focus on learning, ownership, and continuous improvement

Information Security Analyst | Cybersecurity, Threat Intelligence & Incident Response | Madison, WI | $97K–$146K

Information Security Analyst

📍 Madison, Wisconsin (Hybrid – Flexible Work From Home Days)
📅 Full-time | Mid-Senior Level

💰 Salary: $97,000 – $146,000 per year
✨ Benefits: Full package (healthcare, retirement, PTO & more)

🚀 About the Role

We are seeking a skilled Information Security Analyst to strengthen our cybersecurity defenses and protect enterprise systems from evolving threats. In this hands-on, high-impact role, you’ll be at the forefront of detecting, analyzing, and responding to incidents—keeping critical data and infrastructure safe.

This position offers a unique opportunity to work across threat intelligence, incident response, and digital forensics, while collaborating with cross-functional teams to enhance the organization’s overall security posture.

🛡️ Key Responsibilities

• Monitor and analyze threat intelligence to assess risks and drive proactive defense strategies.

• Investigate escalated incidents (malware, phishing, unauthorized access) through the full response lifecycle.

• Conduct forensic investigations, advanced data collections, and eDiscovery requests.

• Support incident response tabletop exercises to identify gaps and enhance readiness.

• Review vulnerability scans and penetration test results, recommending improvements.

• Develop and maintain security policies, standards, and training to strengthen organizational awareness.

• Collaborate with IT, Legal, HR, and leadership teams on investigations and compliance.

🔧 Required Skills & Experience

• 5+ years of information security experience (audit, assessment, engineering, or architecture).

• Strong understanding of incident response, threat intelligence, and forensic analysis.

• Experience with tools such as Magnet Forensics Axiom Cyber, Splunk, Microsoft Defender, and MITRE ATT&CK.

• Ability to clearly communicate technical findings to both technical and non-technical audiences.

• Proven expertise in developing security policies, standards, and governance practices.

• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).

🎯 Preferred Qualifications

• Financial Services industry background.

• Law enforcement or forensics experience.

• Strong consulting, negotiation, and relationship management skills.

This role is ideal for a proactive cybersecurity professional who thrives on investigating threats, improving defenses, and collaborating to protect sensitive information.