Information Systems Security Officer

Apogee Research, LLC

. Provide comprehensive information systems security support, reporting to the Director of Operations .

Posted 9/24/2026full-timeArlington • Virginia • United StatesMid-LevelSenior💰 $114,133 - $171,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information systems security, including the development and maintenance of security documentation, risk management frameworks, and compliance with DoD regulations. Proficient in auditing, vulnerability assessment, and incident response within classified environments.

Highest-signal resume keywords

DoD 8140/8570 CertificationInformation Systems Security Officer (ISSO) ExperienceRisk Management Framework (RMF) KnowledgeSecurity Auditing ExperienceTop Secret Clearance with SCI Eligibility

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Control AssessmentRisk Assessment ReportsSystem Audit Logs AnalysisVulnerability IdentificationSecurity Configuration ManagementAssured File TransfersSecurity Policy DevelopmentWindows Server ConfigurationLinux Security Controls ImplementationIncident Response Drills

Soft Skills

Excellent Communication SkillsProblem-Solving AbilityAbility to Work Under PressureMultitaskingTeam Collaboration

Tools & Technologies

NIST SP 800-53 Rev 4/5NIST SP 800-171DoD STIG OverlaysControlled Unclassified Information NetworksEnterprise Sub-System Packages

Certifications & Qualifications

Security+CySA+

Industry Keywords

DoD RegulationsNISPOM ComplianceCyber Awareness TrainingInformation Continuous Security MonitoringTechnical Security Safeguards

Tech Stack

Tools & technologies

Linux

About the role

Key responsibilities & impact

Provide comprehensive information systems security support, reporting to the Director of Operations
Ensure users follow information security policies and DoD regulations to protect, operate, maintain, and dispose of systems and data
Interpret, review, and maintain SSPs, SCTMs, Risk Assessment Reports, Security Control Assessment Reports, and authorizations
Participate in assessments of classified and Controlled Unclassified Information networks
Troubleshoot user accounts and network issues; perform backups and assist with Assured File Transfers
Maintain security configuration integrity and remove decommissioned information systems
Identify vulnerabilities and recommend or implement countermeasures for controlled and secure network resources
Develop RMF packages, including SSPs, Enterprise Sub-System packages, Information Continuous Security Monitoring Plans, and Body of Evidence
Coordinate authorization activities with Program Managers, the ISSM, and Government Customer Security Control Accessors
Review and analyze system audit logs for anomalous activity and potential threats
Conduct and monitor cyber awareness and information systems training
Perform security audits on assigned systems
Maintain current information systems documentation, including training records, user agreements, system baselines, and SSPs
Coordinate with program stakeholders, ISSM, CPSO/FSO, IT Manager, and team members to maintain an acceptable security posture
Support the ISSM in reporting, responding to, and investigating security violations and incidents
Participate in incident response drills and change configuration boards
Develop and maintain POA&Ms for security vulnerabilities and recommend remediation of required security controls

Requirements

What you’ll need

3-5 years as an ISSO or ISSE within the Intelligence or DoD Environment
Must hold and maintain DoD 8140/8570 approved baseline certification (e.g., Security+, CySA+, etc.)
Active DoD Top Secret clearance with SCI eligibility
Experience with auditing information systems
Experience with certification/authorization requirements under NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev 4/5, NIST SP 800-171, DoD STIG Overlays, and other USG IS/Security-related policies
Working knowledge of secure Government enterprise-level information systems and networks, isolated standalone networks, security policies, technical security safeguards, and operational security measures
Strongly preferred: experience implementing security controls on Red Hat, other Linux distributions, and Windows operating systems according to STIGs and NIST 800-53 controls
Preferred: knowledge and experience with technical and configuration standards for information system security; experience configuring Windows Server operating systems, system virtualization, and related peripherals
Preferred: experience developing security policies and procedures
Ability to work under pressure, manage changing priorities, multitask, and meet tight deadlines
Excellent oral and written communication skills and ability to work in a team environment
Problem-solving ability and capacity to cope with conflict, stress, and crisis situations

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Flexible Spending Accounts (FSAs)
Paid vacation
Paid sick leave
Paid holidays
Choice of paid garage parking or a contribution towards a transit account
Equal Employment Opportunity and Affirmative Action employer