Information Systems Security Officer

Accountabilities:

• Lead and maintain documentation required throughout all phases of the Authority to Operate (ATO) process, coordinating with customer security, engineering, and project management teams to collect required information and maintain accurate security artifacts.
• Support ATO assessments and provide active participation throughout assessment activities, ensuring systems and documentation align with applicable security and compliance requirements.
• Coordinate security documentation related to configuration management, software development lifecycle processes, system architecture, and other project controls, including the creation of technical diagrams and supporting materials.
• Monitor, investigate, and troubleshoot information assurance issues across computing, network, and enclave environments, using security alerts, firewall logs, network traffic, and host-level data to identify potential threats and vulnerabilities.
• Assess system and network configurations against established security policies and acceptable configuration standards, identifying gaps and recommending appropriate remediation.
• Develop, implement, and maintain enterprise security policies and procedures covering authentication, security incident escalation, auditing, firewalls, encryption, and other security controls.
• Support security risk analysis, response planning, incident documentation, vulnerability assessments, and executive-level reporting on security matters.
• Manage and monitor software threats and vulnerabilities while evaluating security products, processes, and procedures that can improve operational effectiveness and overall security posture.
• Provide direct cybersecurity guidance and support to business and IT stakeholders, translating complex security requirements into practical recommendations.
• Apply broad knowledge of networking, databases, systems, web operations, cloud environments, and enterprise security strategies to support secure modernization initiatives.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Computer Programming, or another relevant computer-related discipline.
• At least 7 years of experience leading or supporting computer network security monitoring, security investigations, cybersecurity incident response, and resolution of security issues.
• At least 3 years of hands-on experience with AWS Cloud Security; AWS security certification is preferred.
• At least 4 years of experience supporting Authority to Operate (ATO) processes in AWS environments, particularly within large government agencies.
• Demonstrated experience with ATO, FedRAMP, CIS, ISO 27001, and NIST security standards and frameworks.
• Strong understanding of identity, credential, and access management (ICAM), Security Information and Event Management (SIEM), and vulnerability management tools.
• Experience with CSAM or comparable security compliance and authorization management platforms.
• Experience documenting security incidents and conducting security vulnerability assessments.
• Experience working with Agile and SAFe teams, including security testing and identifying system and network vulnerabilities.
• CISSP certification is preferred.
• Strong analytical, problem-solving, communication, and documentation skills, with the ability to collaborate effectively across technical and non-technical teams.
• Ability to manage multiple priorities, communicate security risks clearly, and work independently while maintaining strong attention to detail and compliance discipline.
• U.S. citizenship is not required, and no security clearance is currently required for the position.

Benefits:

• Salary: Estimated annual range of $129,813–$172,500, with actual compensation based on experience, location, and contractual considerations.
• Remote work: Fully remote position with a full-flex work week designed to support flexibility and work-life balance.
• Healthcare: Multiple medical plan options, including plans with Health Savings Accounts, plus dental and vision coverage.
• Retirement: 401(k) plan with company matching and pre- and post-tax contribution options.
• Paid time off: Vacation, sick, personal, and holiday leave, with typically 15 days of paid leave per calendar year plus 10 paid holidays for new employees, subject to applicable policies and prorating.
• Family support: Up to 160 hours of paid family leave during a rolling 12-month period for eligible employees.
• Insurance: Short- and long-term disability, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident coverage.
• Career development: Access to AI-powered career development resources, learning opportunities, and internal mobility support.
• Wellness and culture: Comprehensive benefits and wellness programs, with opportunities to grow within a technology and cybersecurity-focused environment.
• Schedule: Full-time, 40 hours per week, with no regular travel required.