Information Systems Security Officer

Apogee Research, LLC

Information System Security Officer providing information systems security support in executive-level DoD environments. Focused on maintaining operational security and compliance across various systems and networks.

Posted 5/12/2026full-timeArlington • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Ensure users follow established information security policies and procedures to protect, operate, maintain, and decommission systems and secure data in accordance with internal security policies and Department of Defense (DoD) regulations
Interpret, review, maintain information Systems Security Plans (SSPs), Security Control Traceability Matrix (SCTM), Risk Assessment Reports, Security Control Assessment Reports, and authorizations for existing systems in accordance with DoD mandated policies
Develop a comprehensive Risk Management Framework (RMF) package for new systems with complete body of evidence - including SSPs, Information Continuous Security Monitoring Plans, Plans of Action & Milestones (POA&Ms), architecture diagrams, and additional artifacts to support system authorization in coordination with Program Managers, Information Systems Security Manager, and Government Customer Security Control Accessors
Participate in and support assessments of various classified and Controlled Unclassified Information networks
Perform compliance and vulnerability scans, assist with Assured File Transfers, ensure the integrity of security configurations, and the removal of decommissioned information systems
Develop and maintain a Plan of Action and Milestones (POA&M) for all security related vulnerabilities and provide recommendations to the ISSM on correcting vulnerabilities or implementing countermeasures associated with required security controls
Coordinate with program stakeholders, the ISSM, Contract Program Security Officer (CPSO)/Facility Security Officer (FSO), IT Manager and team members to define, implement and maintain an acceptable information systems security posture
Ensure information systems documentation (i.e., training records, user agreements, system baseline, SSPs etc.) are kept current
Review and analyze system audit logs to identify anomalous activity and potential threats to controlled and secure network resources
Provide support to the ISSM in reporting, responding to, and investigating security violations and incidents
Conduct and monitor cyber awareness and information systems training sessions for company employees
Participate in and support incident response and contingency planning drills; implement configuration management procedures and participate in change configuration board (CCB) reviews

Requirements

What you’ll need

3-5 years as an ISSO or ISSE
Required to hold and maintain DoD 8140/8570 approved baseline certification (e.g., Security+, CySA+, etc.)
Experience with auditing information systems
Experience with certification/authorization requirements as outlined in the NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev 4/5, NIST SP 800-171, DoD STIG Overlays, and other USG IS/Security-related policies
Self-starter, highly motivated, able to multi-task and meet tight deadlines
Excellent communication skills (oral and written), ability to work in a team environment
Must work well with others
Effective at problem-solving

Benefits

Comp & perks

Health, dental, vision, life, and disability insurance
FSAs
Paid vacation
Sick leave
Paid holidays
Paid garage parking or a contribution towards a transit account

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk Management Framework (RMF)Security Control Assessment ReportsRisk Assessment ReportsSecurity Control Traceability Matrix (SCTM)vulnerability scanscompliance auditscyber awareness trainingconfiguration managementincident responseinformation systems security documentation

Soft Skills

self-starterhighly motivatedmulti-taskingexcellent communication skillsteamworkproblem-solvingability to meet tight deadlines

Certifications

DoD 8140/8570 approved baseline certificationSecurity+CySA+