Information Systems Security Officer; ISSO

Information Systems Security Officer (ISSO)

Quantico, United States | Posted on 05/19/2026

The Information Systems Security Officer (ISSO) will work closely with customers to ensure the confidentiality, integrity, and availability of systems, applications, networks, and data. The ISSO will:

• Plan, analyze, develop, implement, maintain, and enhance information systems security programs and infrastructure.
• Perform Security Assessment and Authorization (SAA) activities, including IA policy directives, guides, and IA security tools such as Tenable.io, Nessus Pro, and NMap.
• Coordinate with other ISSOs to meet interconnection, policy, and procedural requirements, ensuring documentation is provided and updated.
• Advise customers on encryption technology, vulnerability analysis, and security management standards to meet FISMA requirements.
• Prepare and maintain documentation such as Configuration Management Plans, Incident Response Plans, Information System Contingency Plans, and Plan of Action and Milestones (POA&M).
• Identify IA vulnerabilities and coordinate with Infrastructure and Development teams to mitigate or apply for exceptions through POA&M processes.
• Review vulnerability and compliance SCAP and/or DISA STIGs scans on infrastructure and applications, ensuring patch and configuration compliance.
• Prepare SAA packages to obtain and maintain authority-to-operate, authority-to-test, or other SAA authority types for systems and applications.
• Attend and represent program security interests in meetings within and outside the program, scheduling and conducting meetings to address findings and document outcomes in the CMP and POA&M.

• Active Top Secret Clearance (Counterintelligence Polygraph may be required).
• Bachelor's degree in Information Systems Technology, Computer Science, Engineering, or related field and 5+ years of experience in cybersecurity or risk management;
  * or* 9+ years of experience with certifications such as CISSP, CISM, CAP, CASP+.
• Experience with application installation, configuration, and operational procedures supporting cybersecurity mandates.
• Ability to conduct the entire Risk Management Framework (RMF) through all seven steps.
• Experience with supporting information assurance and cybersecurity development of security plans or packages for Assessment and Authorization (A&A) of IT systems, including implementation and assessment of cybersecurity controls.
• Experience with cyber continuous diagnostics and mitigation tools such as Splunk and Graylog.
• Experience reviewing Nessus/ACAS vulnerability scans, audit logs, Security Technical Implementation Guides (STIGs), and Information Assurance Vulnerability Alerts (IAVA).
• Ability to assess current and evolving security threats in an operational environment.
• Ability to work onsite in Quantico, VA.

Full Visibility LLC is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran status, disability, or genetic information or any other reason prohibited by law in employment.