Information Systems Security Officer

Apogee Research, LLC

. Ensure users follow information security policies and procedures to protect, operate, maintain, and dispose of systems and data in accordance with internal policies and DoD regulations .

Posted 10/10/2026full-timeArlington • Virginia • United StatesMid-LevelSenior💰 $114,133 - $171,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information security policies, risk management frameworks, and security audits within the DoD environment. Proficient in developing security documentation and implementing security controls across various operating systems.

Highest-signal resume keywords

DoD 8140/8570 CertificationInformation Systems Security Plans (SSPs)Risk Management Framework (RMF)Security AuditingVulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Control Assessment ReportsSecurity Control Traceability Matrices (SCTMs)NIST SP 800-53 Rev 4/5NIST SP 800-171STIG OverlaysRed HatWindows Operating SystemsSystem VirtualizationSecurity Policies DevelopmentAssured File Transfers

Soft Skills

Strong Communication SkillsTeam CollaborationProblem-Solving AbilityCrisis Management

Certifications & Qualifications

Security+CySA+

Industry Keywords

DoD RegulationsControlled Unclassified InformationCyber Awareness TrainingIncident ResponseInformation Systems Security

Tech Stack

Tools & technologies

Linux

About the role

Key responsibilities & impact

Ensure users follow information security policies and procedures to protect, operate, maintain, and dispose of systems and data in accordance with internal policies and DoD regulations
Interpret, review, and maintain Information Systems Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Risk Assessment Reports, Security Control Assessment Reports, and authorizations
Participate in and support assessments of classified and Controlled Unclassified Information networks
Troubleshoot user accounts and network issues
Perform backups and assist with Assured File Transfers
Ensure integrity of security configurations and remove decommissioned information systems
Identify vulnerabilities and recommend or implement countermeasures
Develop RMF packages, including SSPs, Enterprise Sub-System packages, Information Continuous Security Monitoring Plans, and Body of Evidence
Coordinate with Program Managers, ISSM, Government Customer Security Control Accessors, and other stakeholders
Review and analyze system audit logs for anomalous activity and potential threats
Conduct and monitor cyber awareness and information systems training
Perform security audits on assigned systems
Maintain current information systems documentation, including training records, user agreements, system baselines, and SSPs
Coordinate with ISSM, CPSO/FSO, IT Manager, and team members to maintain an acceptable information systems security posture
Support the ISSM in reporting, responding to, and investigating security violations and incidents
Participate in incident response drills and change configuration boards
Develop and maintain POA&Ms for security-related vulnerabilities and recommend corrective actions to the ISSM

Requirements

What you’ll need

3-5 years as an ISSO or ISSE within the Intelligence or DoD Environment
Required to hold and maintain DoD 8140/8570 approved baseline certification (e.g., Security+, CySA+, etc.)
Experience with auditing information systems
Experience with certification/authorization requirements outlined in the NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev 4/5, NIST SP 800-171, DoD STIG Overlays, and other USG IS/Security-related policies
Strong communication skills, oral and written
Ability to work in a team environment and work well with others
Problem-solving ability and ability to cope with conflict, stress and crisis situations
Strongly preferred: experience implementing security controls on Red Hat, other Linux distributions, and Windows operating systems according to STIGs and NIST 800-53 controls
Strongly preferred: knowledge and experience with information system security technical and configuration standards
Preferred experience configuring Windows Server operating systems, system virtualization, and related peripherals
Preferred experience developing security policies and procedures

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Flexible Spending Accounts (FSAs)
Paid vacation
Sick leave
Paid holidays
Choice of paid garage parking or a contribution towards a transit account