Independent Software

Senior Information Systems Security Officer (ISSO)

Information Assurance - Annapolis Junction, MD - Full Time

What You Will Do:
As an Information Systems Security Officer at Independent Software, you will enhance the security posture of mission critical systems supporting the Department of Defense and Intelligence Community. You will oversee the full lifecycle of cybersecurity operations from implementing Risk Management Framework controls to maintaining system accreditation while collaborating closely with engineering and program management teams to safeguard classified environments. Your technical expertise and leadership will directly support the secure design, configuration, and continuous monitoring of systems that enable national security missions.

Key Responsibilities: 

  • Manage daily security operations for information systems ensuring compliance with Department of Defense and Intelligence Community cybersecurity policies, directives, and frameworks
  • Conduct vulnerability and risk assessments to support accreditation decisions and ensure system integrity throughout development and sustainment
  • Administer configuration control for security software, hardware, and firmware ensuring all changes are evaluated for potential security impacts
  • Create and maintain critical security documentation including
     – System Security Plans (SSPs)
     – Risk Assessment Reports (RARs)
     – Plan of Actions and Milestones (POA&Ms)
     – Certification and Accreditation Packages
     – System Requirements Traceability Matrices (SRTMs)
  • Lead system authorization efforts in accordance with the Department of Defense Risk Management Framework process and legacy NISCAP standards ensuring timely submission and approval of security artifacts
  • Evaluate, implement, and maintain the use of agency specific security tools such as Latteart, Biscoti, and Xacata for monitoring and reporting
  • Assess current security processes, identify vulnerabilities, and develop proactive solutions to strengthen the organization’s cybersecurity posture
  • Work directly with system administrators, engineers, and program leadership to resolve security issues and embed cybersecurity best practices across all project phases
Required Skills and Qualifications:
  • Ability to interpret and apply Department of Defense, National Institute of Standards and Technology, and Intelligence Community security standards including NIST SP 800-53, CNSSI 1253, and DoDI 8510.01
  • Skilled in Risk Management Framework steps 1 through 6, risk mitigation, and continuous monitoring
  • Experience implementing and validating technical controls for operating systems, applications, and network devices
  • Hands-on experience with vulnerability scanners, audit tools, and enterprise security management systems such as ACAS, Nessus, or comparable tools
  • Ability to perform detailed risk assessments and author clear, actionable security documentation
  • Strong written and verbal communication skills with the ability to brief stakeholders and leadership
  • Proven ability to work in a cross-functional classified environment with minimal supervision
  • Exposure to infrastructure provisioning or configuration management tools (e.g., Ansible, Terraform)
Education and Experience:
  • Bachelor’s degree in Computer Science, Information Security, Information Assurance, or related technical discipline
  • In lieu of a degree, an additional four years of relevant experience may be substituted
  • Minimum of twelve or more years of professional experience in cybersecurity, information assurance, or systems security engineering
  • Minimum of seven or more years of ISSO or equivalent experience supporting Department of Defense or Intelligence Community programs of similar size and complexity
Certifications: 
  • DoD 8570 compliance with IAM Level II or IAT Level III (CASP, CISSP, or Associate).
Clearance Requirement:
  • Must possess an active TS/SCI with appropriate Polygraph to be considered for this role
Why Choose Independent Software:
At Independent Software, our people are the mission. We’ve built a company around collaboration, integrity, and innovation and we make sure our team has the tools and support to grow, succeed, and thrive.
When you join us, you will:
  • Support critical national security missions that matter
  • Be part of a close-knit, employee-first culture where your voice is heard
  • Expand your skills through ongoing training, mentorship, and career development
  • Enjoy competitive compensation, generous benefits, and work-life balance


Ready to take the next step in your career? Join us and be part of something bigger.

Apply today.

We’re an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Apply: Senior Information Systems Security Officer (ISSO)
* Required fields
First name*
Last name*
Email address*
Location *
Phone number*
Resume*

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

Cover Letter
Who referred you to this position? Enter their first and last name here.
What’s your citizenship / employment eligibility?*
What’s your highest level of education completed?*
College or University
LinkedInLinkedIn profile URL:
Desired salary
Earliest start date?
Do you possess an active and current TS/ SCI clearance?*
Do you possess an active and current Polygraph?*
If yes, please specify the agency that conducted your polygraph (e.g., NSA, CIA, DIA, NGA, etc.).
Note: The Department of Defense (DoD) itself does not conduct polygraphs. Please list the specific agency within the IC that issued your polygraph.*
How many years of experience do you have in information systems security, cybersecurity, or related fields?*
Please check any current and valid certification (s) that you have.*
List any valid certifications you have that are not in the list that may be relevant to this position.
Have you directly worked with NIST SP 800-53 controls?*
Have you supported a system through the RMF process?*
Have you created or maintained a System Security Plan (SSP)?*
Which RMF documents have you worked with? (Select all that apply)*
Have you participated in an A&A (Assessment & Authorization) process?*
What tools have you used for vulnerability scanning or compliance?*
Human Check*