Security Operations

Information System Security Officer (ISSO) – TS/SCI Full Scope Poly – Annapolis Junction, MD

Information System Security Officer (ISSO) – TS/SCI Full Scope Poly

📍 Location: Annapolis Junction, MD
🏢 Work Arrangement: 100% Onsite
💼 Employment Type: Full-Time
🔒 Security Clearance Required: Active TS/SCI with Full Scope Polygraph (NSA Preferred)
🇺🇸 Citizenship: U.S. Citizen Required
🚫 Visa Sponsorship: Not Available
🚚 Relocation Assistance: Available
💰 Compensation: $100,000 – $200,000 Base Salary

Overview

A leading government technology contractor is seeking Information System Security Officers (ISSOs) to support mission-critical classified programs within highly secure government environments.

This role is responsible for maintaining cybersecurity compliance throughout the Risk Management Framework (RMF) lifecycle, supporting system accreditation, continuous monitoring, vulnerability management, and ongoing cybersecurity operations.

The ideal candidate will possess strong RMF expertise, experience supporting classified environments, and the ability to work closely with System Administrators, System Owners, Information System Security Managers (ISSMs), Security Control Assessors, and Government stakeholders.

Key Responsibilities

Risk Management Framework (RMF)

  • Support the full RMF lifecycle for classified systems.

  • Develop and maintain RMF documentation and accreditation packages.

  • Coordinate Authority to Operate (ATO) activities.

  • Support security authorization and reauthorization efforts.

  • Ensure systems maintain compliance with cybersecurity requirements.

Security Compliance & Assessments

  • Conduct security control reviews and assessments.

  • Validate implementation of required security controls.

  • Monitor compliance against NIST and government standards.

  • Support internal and external cybersecurity audits.

Continuous Monitoring (ConMon)

  • Support ongoing Continuous Monitoring activities.

  • Review system configurations and compliance posture.

  • Analyze vulnerability findings and remediation efforts.

  • Track compliance status and corrective actions.

Vulnerability & Risk Management

  • Monitor vulnerabilities and security findings.

  • Coordinate remediation efforts with technical teams.

  • Assess risk and recommend mitigation strategies.

  • Support vulnerability management programs.

Stakeholder Collaboration

  • Work closely with:

    • System Administrators

    • System Owners

    • ISSMs

    • Security Control Assessors

    • Government Security Teams

  • Provide security guidance and compliance recommendations.

  • Support cybersecurity reviews and inspections.

Required Qualifications

Security Requirements

✔ Active TS/SCI Clearance

✔ Active Full Scope Polygraph (NSA Preferred)

✔ U.S. Citizenship Required

Cybersecurity & RMF Experience

Experience supporting:

  • Information Assurance (IA)

  • Cybersecurity Compliance

  • ISSO Functions

  • Classified Information Systems

Strong understanding of:

  • Risk Management Framework (RMF)

  • Authority to Operate (ATO)

  • Security Control Assessments

  • Continuous Monitoring (ConMon)

  • Risk Assessment Methodologies

RMF & Compliance Tools

Experience with one or more of:

  • LATTEART

  • XACTA

  • BISCOTTI

  • WATCHCAT

  • STE

Experience with:

  • Compliance scanning tools

  • Configuration assessment tools

  • Vulnerability management platforms

NIST Framework Knowledge

Strong familiarity with:

  • NIST SP 800-53 Rev. 3 and/or Rev. 5

  • NIST SP 800-37

  • Security Controls

  • RMF Documentation Requirements

Required Documentation Experience

Candidates should have experience creating, reviewing, or maintaining:

Security Documentation

  • System Security Plans (SSP)

  • Plans of Action & Milestones (POA&M)

  • Security Plan Findings (SPF)

  • Exception Documentation

Risk & Compliance Documentation

  • Risk Assessment Reports (RAR)

  • Security Assessment Reports (SAR)

  • Business Impact Assessments (BIA)

  • Configuration Management Plans (CMP)

  • Contingency Plans (CP)

  • After Action Reports (AAR)

Preferred Qualifications

Government & Classified Environment Experience

  • Classified Government systems

  • Security audits and inspections

  • Compliance reviews

  • Vulnerability remediation programs

Stakeholder Coordination

Experience coordinating with:

  • Authorizing Officials (AO)

  • Security Control Assessors (SCA)

  • ISSMs

  • System Owners

Technical Knowledge

  • Operating System Security

  • System Administration Concepts

  • Vulnerability Management

  • Configuration Management

Preferred Certifications

Highly desired certifications include:

  • CompTIA Security+

  • CISSP

  • CAP

  • CASP+

  • CISM

Must-Have Requirements

Clearance

✅ Active TS/SCI Clearance

✅ Active Full Scope Polygraph

Cybersecurity

✅ RMF Experience

✅ ATO Experience

✅ Continuous Monitoring (ConMon)

✅ Security Control Assessments

Documentation

✅ SSP Development

✅ POA&M Management

✅ Security Compliance Documentation

Soft Skills

✅ Strong Written Communication

✅ Strong Organizational Skills

✅ Risk-Based Decision Making

✅ Collaboration & Stakeholder Management

Screening Questions

  1. Do you currently hold an active TS/SCI clearance with a Full Scope Polygraph?

  2. Was your Full Scope Polygraph issued by NSA?

  3. When was your most recent Full Scope Polygraph completed?

  4. How many years of ISSO, Information Assurance, or Cybersecurity compliance experience do you have?

  5. Have you supported the full RMF lifecycle, including ATO activities?

  6. Which RMF compliance tools have you used (XACTA, LATTEART, BISCOTTI, WATCHCAT, STE)?

  7. Have you developed or maintained SSPs, POA&Ms, SARs, or RARs?

  8. What experience do you have with NIST 800-53 and NIST 800-37?

  9. Do you have experience supporting classified Government systems?

  10. Do you hold any cybersecurity certifications such as Security+, CISSP, CAP, CASP+, or CISM?

Ideal Candidate Profile

The ideal candidate will:

  • Hold an active TS/SCI Full Scope Polygraph.

  • Have strong ISSO or Information Assurance experience within classified environments.

  • Possess deep knowledge of RMF, ATO, and Continuous Monitoring processes.

  • Be highly detail-oriented and documentation-focused.

  • Have experience working with government cybersecurity compliance tools.

  • Understand vulnerability management and risk mitigation practices.

  • Effectively collaborate with technical and non-technical stakeholders.

  • Balance mission requirements with cybersecurity compliance obligations.

Candidate Snapshot

Requirement

Details

Clearance

Active TS/SCI + Full Scope Poly

Citizenship

U.S. Citizen

Experience Level

Mid-Level to Senior

Frameworks

RMF, NIST 800-53, NIST 800-37

Compliance

ATO, ConMon, Security Controls

Documentation

SSP, POA&M, SAR, RAR, CMP, CP

Tools

XACTA, LATTEART, BISCOTTI, WATCHCAT, STE

Certifications

Security+, CISSP, CAP, CASP+, CISM (Preferred)

Location

Annapolis Junction, MD

Work Arrangement

100% Onsite

Travel

None

Compensation

$100K – $200K

Relocation

Available

Why This Opportunity?

Mission Impact

Support highly classified national security programs and critical government systems.

Cybersecurity Leadership

Play a key role in accreditation, compliance, risk management, and cybersecurity governance activities.

Career Growth

Work alongside highly skilled cybersecurity professionals supporting some of the nation's most sensitive environments.

Excellent Benefits

  • 3 Weeks PTO

  • 11 Federal Holidays

  • Medical & Dental Coverage

  • Life Insurance

  • STD & LTD Coverage

  • 401(k) with Company Match

  • Long-Term Career Development

This opportunity is ideal for an ISSO, Information Assurance Analyst, Cybersecurity Compliance Analyst, RMF Analyst, Information Security Specialist, Security Control Assessor Support Specialist, or Cybersecurity Governance Professional with an active TS/SCI Full Scope Polygraph seeking to support mission-critical government programs.

 

Information System Security Engineer (ISSE) – TS/SCI Full Scope Poly – Annapolis Junction, MD

Information System Security Engineer (ISSE) – TS/SCI Full Scope Poly

📍 Location: Annapolis Junction, MD
🏢 Work Arrangement: 100% Onsite
💼 Employment Type: Full-Time
🔒 Security Clearance Required: Active TS/SCI with Full Scope Polygraph (NSA Preferred)
🇺🇸 Citizenship: U.S. Citizen Required
🎓 Certification Required: DoD 8570/8140 IASAE Level II Compliant Certification
🚫 Visa Sponsorship: Not Available
🚚 Relocation Assistance: Available
💰 Compensation: $100,000 – $200,000 Base Salary

Overview

A leading government technology contractor is seeking Information System Security Engineers (ISSEs) to support mission-critical classified government programs.

This role focuses on integrating cybersecurity engineering principles throughout the entire system lifecycle, including system design, implementation, accreditation, continuous monitoring, and sustainment. The ISSE will play a critical role in Risk Management Framework (RMF) execution, Assessment & Authorization (A&A) activities, security control validation, and ongoing cybersecurity compliance.

The ideal candidate will possess a strong blend of cybersecurity engineering, RMF expertise, technical security assessment experience, and security architecture knowledge within highly secure classified environments.

Key Responsibilities

Risk Management Framework (RMF)

  • Support the full RMF lifecycle for classified information systems.

  • Develop and maintain RMF documentation and security artifacts.

  • Assist with Authority to Operate (ATO) activities and sustainment.

  • Support Assessment & Authorization (A&A) efforts.

  • Maintain body-of-evidence packages for accreditation activities.

Security Engineering

  • Implement and validate security controls.

  • Perform Security Control Traceability and technical validation.

  • Support system boundary definition and security architecture development.

  • Conduct technical security assessments and risk analysis.

  • Recommend security improvements and mitigation strategies.

Compliance & Continuous Monitoring

  • Participate in Continuous Monitoring (ConMon) activities.

  • Conduct compliance assessments and security reviews.

  • Analyze vulnerability scan results and remediation efforts.

  • Verify remediation effectiveness and identify false positives.

  • Ensure ongoing compliance with cybersecurity requirements.

Vulnerability Management & Hardening

  • Support vulnerability management programs.

  • Implement and validate STIG compliance.

  • Support patch validation and security compliance efforts.

  • Assist with system hardening initiatives.

  • Coordinate remediation activities with technical teams.

Stakeholder Collaboration

  • Work closely with:

    • ISSOs

    • ISSMs

    • Security Control Assessors (SCAs)

    • System Owners

    • System Administrators

  • Support accreditation, compliance, and cybersecurity engineering efforts across mission systems.

Required Qualifications

Security Requirements

✔ Active TS/SCI Clearance

✔ Active Full Scope Polygraph (NSA Preferred)

✔ U.S. Citizenship Required

Certification Requirement

✔ DoD 8570/8140 IASAE Level II Compliant Certification

Examples include:

  • CISSP

  • CASP+

  • CCSP

  • CSSLP

Cybersecurity & RMF Experience

Strong experience with:

  • Risk Management Framework (RMF)

  • Assessment & Authorization (A&A)

  • Authority to Operate (ATO)

  • Security Control Implementation

  • Security Control Validation

  • Continuous Monitoring (ConMon)

NIST Knowledge

Strong familiarity with:

  • NIST SP 800-37

  • NIST SP 800-53 Rev. 3 and/or Rev. 5

  • Security Control Frameworks

  • RMF Compliance Processes

RMF & Compliance Tools

Experience with one or more of:

  • LATTEART

  • XACTA

  • BISCOTTI

  • WATCHCAT

  • STE

Additional experience with:

  • Compliance scanning tools

  • Configuration assessment tools

  • Vulnerability management platforms

Core ISSE Skill Areas

Security Engineering

  • Security Control Implementation

  • Security Control Validation

  • Security Architecture Support

  • System Boundary Definition

Compliance & Accreditation

  • Assessment & Authorization (A&A)

  • RMF Artifact Development

  • Accreditation Package Support

  • Body of Evidence Management

Vulnerability Management

  • Vulnerability Analysis

  • Remediation Tracking

  • Patch Validation

  • STIG Compliance

  • Security Hardening

Risk Management

  • Technical Risk Analysis

  • Compliance Validation

  • Continuous Monitoring (ConMon)

  • Security Assessment Support

Preferred Qualifications

Government & Classified Environment Experience

  • Classified Government cybersecurity programs.

  • Large-scale enterprise systems.

  • Mission-critical environments.

Technical Infrastructure Exposure

Experience supporting:

  • Enterprise Linux environments

  • Network infrastructure

  • Cloud environments

Stakeholder Coordination

Experience collaborating with:

  • ISSOs

  • ISSMs

  • Security Control Assessors

  • System Owners

  • Engineering Teams

Must-Have Requirements

Clearance

✅ Active TS/SCI Clearance

✅ Active Full Scope Polygraph

Certification

✅ IASAE Level II Certification

Cybersecurity

✅ RMF Experience

✅ A&A Experience

✅ ATO Experience

✅ Security Control Validation

Compliance

✅ Continuous Monitoring

✅ Vulnerability Management

✅ STIG Implementation

Documentation

✅ RMF Artifacts

✅ Accreditation Packages

✅ Security Documentation

Screening Questions

  1. Do you currently hold an active TS/SCI clearance with a Full Scope Polygraph?

  2. Was your Full Scope Polygraph issued by NSA?

  3. When was your most recent Full Scope Polygraph completed?

  4. Which IASAE Level II certification do you currently hold (CISSP, CASP+, CCSP, CSSLP, etc.)?

  5. How many years of ISSE or cybersecurity engineering experience do you have?

  6. Have you supported the full RMF lifecycle, including A&A and ATO activities?

  7. Which RMF tools have you used (XACTA, LATTEART, BISCOTTI, WATCHCAT, STE)?

  8. Do you have experience implementing and validating security controls?

  9. Have you supported STIG implementation, vulnerability remediation, and compliance validation?

  10. Do you have experience supporting classified government systems?

Ideal Candidate Profile

The ideal candidate will:

  • Hold an active TS/SCI Full Scope Polygraph.

  • Possess an active IASAE Level II certification.

  • Have strong cybersecurity engineering experience within classified environments.

  • Be highly knowledgeable in RMF, A&A, and ATO processes.

  • Understand security architecture, control implementation, and compliance validation.

  • Have experience supporting vulnerability management and STIG compliance.

  • Demonstrate excellent analytical, troubleshooting, and documentation skills.

  • Balance mission objectives with cybersecurity requirements and risk management practices.

Candidate Snapshot

Requirement

Details

Clearance

Active TS/SCI + Full Scope Poly

Citizenship

U.S. Citizen

Experience Level

Mid-Level to Senior

Certification

IASAE Level II Required

Frameworks

RMF, NIST 800-37, NIST 800-53

Compliance

A&A, ATO, ConMon

Security

Control Implementation & Validation

Documentation

RMF Artifacts & Accreditation Packages

Tools

XACTA, LATTEART, BISCOTTI, WATCHCAT, STE

Location

Annapolis Junction, MD

Work Arrangement

100% Onsite

Travel

None

Compensation

$100K – $200K

Relocation

Available

Why This Opportunity?

Mission Impact

Support highly classified systems that directly contribute to critical national security missions.

Cybersecurity Engineering Focus

Move beyond compliance into hands-on security engineering, architecture support, security control validation, and accreditation activities.

Technical Growth

Gain exposure to advanced RMF processes, security engineering practices, vulnerability management, and enterprise cybersecurity operations.

Strong Benefits Package

  • 3 Weeks PTO

  • 11 Federal Holidays

  • Medical & Dental Coverage

  • Life Insurance

  • STD & LTD Coverage

  • 401(k) with Company Match

  • Long-Term Career Development

This opportunity is ideal for an Information System Security Engineer (ISSE), Cybersecurity Engineer, RMF Engineer, Security Compliance Engineer, Cybersecurity Architect, A&A Specialist, or Security Controls Engineer with an active TS/SCI Full Scope Polygraph and IASAE Level II certification seeking to support highly sensitive government programs.

 

SOC Analyst – Montvale, NJ | Hybrid Cybersecurity & Vulnerability Management

SOC Analyst

📍 Location: Montvale, New Jersey
🏢 Work Model: Hybrid – 3 days onsite / 2 days remote
🏠 Employees work remotely every Friday + receive 40 additional remote days annually
💼 Employment Type: Full-Time
📈 Seniority Level: Associate / Mid-Level
🎓 Education: Bachelor’s Degree preferred
🔐 Industry: Cybersecurity / Manufacturing / Enterprise IT

💰 Compensation & Benefits

  • Salary Range: $90,000 – $110,000

  • Full benefits package

  • Hybrid flexibility

  • Collaborative and supportive IT/security environment

🚀 Overview

A growing enterprise organization is seeking a SOC Analyst to strengthen its cybersecurity operations through security monitoring, alert investigation, and vulnerability management.

This role combines Security Operations Center (SOC) responsibilities with hands-on vulnerability analysis and remediation coordination across enterprise infrastructure and endpoint environments.

The ideal candidate is analytical, collaborative, proactive, and highly communicative with experience supporting enterprise security operations.

🔧 Key Responsibilities

Security Operations

  • Monitor, triage, and investigate alerts from:

    • SIEM platforms

    • Endpoint protection tools

    • Security monitoring systems

  • Distinguish legitimate threats from false positives

  • Document findings and communicate results clearly

  • Assist with alert tuning and optimization efforts

Vulnerability Management

  • Support enterprise vulnerability scanning and assessments

  • Analyze vulnerability findings and prioritize remediation activities

  • Research CVEs and provide:

    • Exploitability analysis

    • Business impact context

    • Remediation guidance

  • Track remediation progress and validate fixes

Collaboration & Communication

  • Partner closely with:

    • Infrastructure teams

    • IT leadership

    • Cybersecurity teams

  • Maintain strong communication and visibility around risks and remediation efforts

  • Proactively identify opportunities for improvement

Continuous Improvement

  • Assist with:

    • DLP and information protection controls

    • System hardening initiatives

    • Documentation and runbook development

  • Explore enhanced capabilities within existing security tooling

✅ Required Qualifications

  • Bachelor’s degree in:

    • Cybersecurity

    • Computer Science

    • Information Technology

    • Related discipline
      OR equivalent practical experience

  • 3–5 years of experience in:

    • Security operations

    • Vulnerability management

    • Endpoint protection analysis

  • Strong understanding of:

    • CVEs

    • Risk prioritization

    • Vulnerability remediation processes

  • Excellent communication and collaboration skills

⭐ Preferred Skills

  • Experience with:

    • SIEM platforms

    • Enterprise log analysis

    • Endpoint detection & response (EDR) tools

  • Familiarity with:

    • Active Directory

    • Group Policy

    • Security baselines

  • Scripting or reporting experience:

    • PowerShell

    • Python

    • Power BI

  • Security certifications are a plus but not required

🎯 Ideal Candidate

  • Hands-on SOC or cybersecurity analyst with enterprise experience

  • Strong communicator who proactively keeps stakeholders informed

  • Comfortable balancing:

    • Security investigations

    • Vulnerability analysis

    • Cross-functional collaboration

  • Curious, self-driven, and eager to improve security operations

📝 Screening Considerations

  • Do you have experience with:

    • SOC operations

    • Vulnerability management

    • Endpoint security tools?

  • Have you worked with SIEM or enterprise detection platforms?

  • Are you comfortable working in a hybrid environment in Montvale, NJ?

  • Do you have experience coordinating remediation efforts with infrastructure teams?

🌍 Work Environment

  • Hybrid work schedule:

    • 3 onsite days

    • 2 remote days

  • Additional remote flexibility throughout the year

  • Collaborative enterprise IT and cybersecurity team

  • Occasional travel between NY/NJ locations may be required

📈 Why Join

  • Broad exposure across enterprise cybersecurity operations

  • Opportunity to influence security tooling and processes

  • Supportive, highly collaborative IT culture

  • Strong focus on learning, ownership, and continuous improvement

 

Cyber-Physical Security Manager – Integrated Cyber & Physical Security | Kansas City

Cyber-Physical Security Manager

📍 Location: Kansas City, Missouri (Hybrid / Flexible WFH)
💼 Employment Type: Full-Time
✈️ Travel: Occasional
🎓 Education: Bachelor’s Degree Required
🚚 Relocation Assistance: Possible for the ideal candidate

Role Overview

This role sits at the intersection of cybersecurity, physical security, and smart infrastructure. As Cyber-Physical Security Manager, you will design, govern, and evolve integrated security systems that protect people, facilities, data, and operational technologies across corporate and project sites.

You’ll act as a technical authority and strategic advisor, translating cybersecurity frameworks into real-world physical and operational security solutions—while partnering closely with IT Security, SOC, Crisis Response, and facilities leadership.

What You’ll Own

  • Design & Architecture

    • Design scalable, resilient cyber-physical security architectures across corporate and project environments

    • Produce technical specifications for:

      • Access control systems

      • Intrusion detection

      • Video surveillance

      • ICS / OT / IoT and smart building technologies

  • Framework Translation & Compliance

    • Translate security frameworks (e.g. ISO 27001, NIST SP 800-82) into technical requirements, procedures, and standards

    • Ensure systems align with federal credentialing and critical infrastructure requirements

  • Risk & Resilience

    • Lead cyber-physical security risk assessments, aligned with enterprise information security risk methodologies

    • Identify vulnerabilities across IT, OT, and physical domains and define mitigation strategies

  • Security Operations & Monitoring

    • Partner with Security Operations Center (SOC), Crisis Management, and Emergency Response teams

    • Enhance monitoring, detection, and response capabilities across physical and cyber environments

    • Integrate physical security platforms with centralized monitoring workflows

  • Enterprise & Smart Building Integration

    • Lead integration of physical security systems with IT and OT platforms

    • Ensure smart building technologies comply with enterprise IT security policies and governance

  • Strategy & Program Development

    • Partner with IT Security leadership to define and execute cyber-physical security strategy

    • Develop and maintain:

      • Security programs

      • Standards & playbooks

      • Operating procedures & checklists

    • Proactively evolve security capabilities to address emerging threats

  • Vendor & Stakeholder Management

    • Own vendor relationships through detailed scopes of work and performance oversight

    • Evaluate and onboard new vendors in line with defined security and operational standards

    • Collaborate cross-functionally with facilities, office management, IT, and security teams

What We’re Looking For

  • 7–10+ years of experience across cyber security, physical security, or integrated security environments

  • Strong background designing and managing enterprise-scale security systems

  • Experience working with OT, ICS, IoT, or smart building technologies

  • Hands-on experience translating security frameworks into operational controls

  • Proven ability to work cross-functionally with IT, facilities, operations, and executive stakeholders

  • Strong documentation, governance, and program-building skills

  • Comfortable operating as both technical expert and strategic advisor

Nice to Have

  • Experience supporting SOC environments or security monitoring platforms

  • Background in critical infrastructure, construction, large facilities, or multi-site enterprises

  • Familiarity with vendor selection, RFPs, and managed security services

Compensation & Benefits

  • 💰 Base Salary: $107,000 – $134,000

  • Comprehensive benefits package including:

    • Medical, Dental, Vision Insurance

    • Paid Time Off

    • Retirement Plan

    • Flexible work arrangements

    • Relocation assistance (if applicable)

Additional Details

  • Security Clearance Required: No

  • Visa Sponsorship: Not available

  • Work Model: Hybrid / Flexible WFH

  • Employment Type: Full-Time

Ideal Candidate Profile

  • Strategic thinker with hands-on technical depth

  • Comfortable owning end-to-end security programs

  • Collaborative, detail-oriented, and proactive

  • Passionate about protecting people, assets, and systems in complex, real-world environments

 

Senior Manager, Industrial Security (FSO) | $153K–$175K | Defense & Aerospace | Greenville, TX

Job Title: Sr. Manager, Industrial Security (Facility Security Officer - FSO)
Location: Greenville, TX (Onsite)
Industry: Aerospace / Aviation / Defense
Category: Security / Industrial Security
Seniority Level: Mid-Senior
Employment Type: Full-Time
Work Schedule: 9/80 Regular
Remote/Onsite: Onsite (classified work required)
Travel: Occasional
Visa Candidates Considered: No
Security Clearance Required: Yes (Top Secret/SCI, adjudicated and in-scope T5)
Relocation Assistance: Yes
Compensation:

  • Base Salary: $153,000 – $175,000

  • Bonus Eligible: No

  • Commission: No

  • Overtime Eligible: No

  • Benefits: Full benefits package included

  • Interview Travel Reimbursed: No

Role Overview:

A leading defense and aerospace organization is seeking a Senior Manager, Industrial Security (FSO) to oversee and manage all aspects of classified security operations supporting Department of Defense (DoD) and Intelligence Community (IC) programs. This leadership role is critical in ensuring compliance with national security regulations, managing the security program lifecycle, and protecting sensitive assets, personnel, and facilities.

Key Responsibilities:

  • Manage, implement, and enforce security compliance per the National Industrial Security Program (NISP) and 32 CFR Part 117 (NISPOM Rule).

  • Serve as the designated Facility Security Officer (FSO) and lead a multidisciplinary security team covering industrial, personnel (PERSEC), physical, and information security.

  • Develop and maintain SOPs, Operational Security Programs, and ensure compliance with all federal and company security policies.

  • Lead and support government security investigations, audits, and assessments.

  • Oversee COMSEC program management, asset tracking, and accountability.

  • Conduct security training, briefings, and education for staff with access to classified material.

  • Engage with stakeholders to interpret security directives, mitigate insider threats, and respond to compliance challenges.

  • Utilize tools and systems such as SIMS, NISS, DISS/NBIS, and maintain familiarity with ICD 705 standards.

  • Maintain up-to-date knowledge on evolving federal security regulations and interdisciplinary compliance across IT, cybersecurity, and configuration management.

  • Act as a security advisor to site leadership and corporate teams to ensure effective protection of personnel, facilities, and information.

Minimum Qualifications:

  • Bachelor’s degree with at least 12 years of relevant experience, or

  • Graduate degree with at least 10 years of related experience, or

  • 16+ years of experience in lieu of a degree.

  • FSO Certification as defined by Defense Counterintelligence and Security Agency (DCSA).

  • Minimum 5 years of direct hands-on FSO experience.

  • Current DoD Top Secret/SCI clearance with adjudicated, in-scope T5 investigation.

  • U.S. Citizenship required.

Preferred Qualifications:

  • Counterintelligence or full-scope polygraph.

  • Degree(s) in Security Management, Criminal Justice, Homeland Security, or related fields.

  • Proficiency in SIMS, NISS, DISS/NBIS; familiarity with ICD 705.

  • Experience with Insider Threat Program management.

  • Knowledge of COMSEC handling and procedures.

  • Professional certifications such as ISP, CPP, or other security designations.

  • Familiarity with DCS, FMS programs, or international travel processes.

Ideal Candidate Profile:

  • Brings 5+ years of direct FSO experience in a classified defense or intelligence setting.

  • Holds a valid FSO certificate and an active Top Secret/SCI clearance.

  • Demonstrates deep understanding of DoD and IC regulatory frameworks.

  • Highly organized, self-motivated, and capable of operating independently in a fast-paced environment.

  • Strong leadership, compliance, and stakeholder engagement skills.

 

Information Systems Security Engineer (ISSE) & Information Systems Security Officer (ISSO) | TS/SCI FS Poly | $220K–$260K | Annapolis Junction, MD

Job Title: Information Systems Security Engineer (ISSE) & Information Systems Security Officer (ISSO)
Location: Annapolis Junction, Maryland (100% Onsite)
Clearance Required: TS/SCI with Full Scope Polygraph (FS Poly)
Compensation: $220,000 – $260,000 base salary
Employment Type: Full-time
Relocation Assistance: Possible for ideal candidate
Benefits: Full benefits offered
Visa Candidates: Not considered

Overview:

We are hiring two experienced cybersecurity professionals for an exciting and mission-critical government program based in Annapolis Junction, MD. Both roles require active TS/SCI with Full Scope Poly (poly must be within the past 5 years and from a Maryland Intelligence Customer). While both positions are integral to the security posture of the program, each requires a different focus, background, and certification path.

1. Information Systems Security Engineer (ISSE)

Role ID: 727
Seniority Level: Mid to Senior
Clearance: TS/SCI w/ FS Poly (mandatory)
Certifications Required:

  • CISSP (Required)

  • ISSEP (Preferred or willing to obtain during crossover if CISSP has been held for 2+ years)

Key Responsibilities:

  • Develop and implement system security designs and architectures for complex, large-scale systems.

  • Lead security risk assessment and mitigation throughout the system development lifecycle.

  • Conduct system security planning, vulnerability testing, and compliance verification.

  • Analyze and implement secure communication protocols, encryption tools, and secure OS configurations.

  • Collaborate with engineers across integration, testing, and development teams to ensure compliance with classified information handling.

  • Use tools such as Nessus, NMAP, Wireshark for threat identification and remediation.

  • Support RMF, risk management activities, and IA (Information Assurance) processes.

Preferred Experience:

  • Bachelor’s or Master’s in Cybersecurity, Information Assurance, or related field.

  • Experience with Defense-in-Depth principles, secure software architecture, and penetration testing tools.

  • Proficient in scripting languages and secure configuration management.

2. Information Systems Security Officer (ISSO)

Role ID: 643
Seniority Level: Mid to Senior
Clearance: TS/SCI w/ FS Poly (mandatory)
Certifications Required:

  • IAT Level II or IAM Level II certification (Required)

    • Examples: Security+ CE, CASP+, CISSP, CISM, or similar

Key Responsibilities:

  • Act as ISSO for a large-scale software development and IT operations program.

  • Enforce security policies and maintain operational security posture of systems.

  • Manage documentation for system Certification & Accreditation (C&A) and Security Plans (SSPs).

  • Conduct vulnerability remediation, IAVA compliance, and configuration management for system security.

  • Support day-to-day information system operations, network security, and audit readiness.

  • Coordinate with ISSM and other security stakeholders to ensure secure system integration and lifecycle support.

Preferred Experience:

  • 10+ years as an ISSO in complex, standalone, or connected environments.

  • Experience maintaining SSPs, performing incident response, and managing vulnerability scans.

  • Familiarity with tools supporting IAVA management, CM, and system auditing.

  • Bachelor’s degree in a related field and 12+ years of overall security experience preferred.

Ideal Candidate Profile (Both Roles):

  • Must hold a current FS Poly with the Maryland Intelligence Customer (within the past 5 years).

  • No prior CCAs (Counterintelligence Concerns).

  • Excellent verbal/written communication skills and team collaboration.

  • Strong commitment to best practices and high-integrity security operations.

Additional Notes:

  • Both roles are 100% onsite in Annapolis Junction, MD.

  • Do not repost these positions.

  • Candidates must be U.S. Citizens with an active TS/SCI with Full Scope Polygraph.

 

Information Security Analyst | Cybersecurity, Threat Intelligence & Incident Response | Madison, WI | $97K–$146K

Information Security Analyst

📍 Madison, Wisconsin (Hybrid – Flexible Work From Home Days)
📅 Full-time | Mid-Senior Level

💰 Salary: $97,000 – $146,000 per year
✨ Benefits: Full package (healthcare, retirement, PTO & more)

🚀 About the Role

We are seeking a skilled Information Security Analyst to strengthen our cybersecurity defenses and protect enterprise systems from evolving threats. In this hands-on, high-impact role, you’ll be at the forefront of detecting, analyzing, and responding to incidents—keeping critical data and infrastructure safe.

This position offers a unique opportunity to work across threat intelligence, incident response, and digital forensics, while collaborating with cross-functional teams to enhance the organization’s overall security posture.

🛡️ Key Responsibilities

  • Monitor and analyze threat intelligence to assess risks and drive proactive defense strategies.

  • Investigate escalated incidents (malware, phishing, unauthorized access) through the full response lifecycle.

  • Conduct forensic investigations, advanced data collections, and eDiscovery requests.

  • Support incident response tabletop exercises to identify gaps and enhance readiness.

  • Review vulnerability scans and penetration test results, recommending improvements.

  • Develop and maintain security policies, standards, and training to strengthen organizational awareness.

  • Collaborate with IT, Legal, HR, and leadership teams on investigations and compliance.

🔧 Required Skills & Experience

  • 5+ years of information security experience (audit, assessment, engineering, or architecture).

  • Strong understanding of incident response, threat intelligence, and forensic analysis.

  • Experience with tools such as Magnet Forensics Axiom Cyber, Splunk, Microsoft Defender, and MITRE ATT&CK.

  • Ability to clearly communicate technical findings to both technical and non-technical audiences.

  • Proven expertise in developing security policies, standards, and governance practices.

  • Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).

🎯 Preferred Qualifications

  • Financial Services industry background.

  • Law enforcement or forensics experience.

  • Strong consulting, negotiation, and relationship management skills.

This role is ideal for a proactive cybersecurity professional who thrives on investigating threats, improving defenses, and collaborating to protect sensitive information.

Your new job awaits.

Start the process →