ISSO II: Security Operations Lead
Listed on 2026-11-07
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations
Information Systems Security Officer II (ISSO2)
Location: Hanover, MD (On-Site) | Status: Open
We are currently seeking an Information Systems Security Officer II (ISSO2) to independently execute and coordinate day-to-day security operations for assigned systems with limited supervision. This role leads continuous monitoring technical activities, including scan scheduling and support, log/alert triage, STIG compliance verification, and security tool health and coverage checks. The ISSO2 coordinates remediation actions with system administrators and engineers, validates corrective actions through re-scan and re-check activities, and maintains accurate operational security evidence repositories, providing technical evidence and posture inputs to the ISSM to support RMF reporting and assessments.
This role does not own RMF package governance, manage POA&Ms as the accountable authority, or make risk acceptance decisions.
If you are detail-oriented, comfortable owning day-to-day security operations, and enjoy driving remediation to closure, then this is the position for you!
Work ScheduleCourses run , Monday through Friday. Contract core hours are .
Essential Responsibilities (describe the day-to-day)- Lead day-to-day security operations for assigned systems, including monitoring and triage of security alerts and logs, validation of security tool health and coverage, and escalation of incidents per SOP.
- Plan and execute vulnerability and compliance scanning activities (credentialed or non-credentialed, as approved), perform basic false-positive review, document results, and maintain remediation tickets with accurate technical detail.
- Execute and validate STIG/compliance posture checks as assigned, coordinating remediation with administrators and validating fixes via re-check with documented completion evidence.
- Maintain security evidence repositories for assigned systems (scan outputs, STIG checklists, tool status evidence, access review artifacts), ensuring proper labeling, access control, and retrievability.
- Support IAM control execution by coordinating account actions with administrators and supporting periodic access reviews, documenting results and discrepancies for disposition by Government/ISSM.
- Provide technical security-impact inputs for proposed changes (affected components, required re-scan/re-test recommendations, control evidence impacts) to support change control discussions, in a non-approval role.
- Produce recurring technical posture inputs (scan trends, top recurring findings, remediation aging) for ISSM/government reporting, and keep tickets updated to reflect current status.
General office environment. The work environment is fast-paced and sometimes involves extreme deadline pressures. The nature of the work requires a high degree of teamwork and cooperation with other members of the staff as well as individuals across the Company and Customers.
Minimum Requirements (Knowledge, Skills, and Abilities)- Experience in information systems design, development, programming, information/computer/cyber/network security, vulnerability analysis, penetration testing, computer forensics, computer systems research, reverse engineering, and/or systems engineering (requirements analysis, design, implementation, testing, integration, deployment/installation, and maintenance).
- Network and system administration experience may satisfy some, but not all, of the relevant experience requirement.
TS/SCI with Polygraph
Minimum EducationOne of the following:
- Doctoral degree, no experience required; or
- Master's degree, plus three (3) years of relevant experience; or
- Bachelor's degree, plus five (5) years of relevant experience; or
- Associate's degree (or 18 semester hours of military coursework/training in a computer-related field), plus seven (7) years of relevant experience.
A degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Information Science, Cybersecurity, or a related field is preferred.
Required CertificationsInformation Assurance Manager (IAM) Tier I certification must be obtained within six (6) months of assignment to the position. Continued certification must be maintained through continuous education or sustainment training while serving in this role.
Preferred Qualifications- Experience with the Risk Management Framework (RMF), Information Systems Security technologies, and IT policies,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).