system security officer

Booz Allen Hamilton

<div>Information System Security Officer
The Opportunity:
We&rsquo;re looking for an Information System Security Officer (ISSO) who can create solutions for the government that will withstand even the most advanced cyber threats. As an ISSO at Booz Allen, you&rsquo;ll detect, evaluate, and document the security configuration of developmental and operational tools and security impacts, and make improvement recommendations. You&rsquo;ll coordinate work with in-house teams, subcontractors, and vendors to identify the right mix of tools and techniques to translate your customers&rsquo; IT needs and future goals into a plan that will enable secure and effective solutions. We need to come up with the best solutions, so you&rsquo;ll investigate new techniques, break free from the legacy model, and go where the industry is going. You&rsquo;ll lead the team through a critical approach to network design, providing alternatives and customizing solutions to maintain a balance of security and mission needs.
As an ISSO on our team, you&rsquo;ll advise the client, lead the discovery of their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll oversee the analysis of technical, environmental, and personnel details from technical subject matter experts and engineers as your team reviews the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, whitepapers, and milestones. Your client will rely on you to translate security concepts, so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take a leadership role in information security while sharing your skills in cloud technologies with both clients and your team. Be a part of our team as we protect our nation's critical information systems.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
3+ years of experience as an ISSO or Information System Security Analyst (ISSA)</li><li>
Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements</li><li>
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems</li><li>
Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO)</li><li>
Experience with eMASS or Xacta IA Manager</li><li>
Ability to perform risk analysis</li><li>
Active TS/SCI clearance; willingness to take a polygraph exam</li><li>
HS diploma or GED and 12+ years of experience supporting IT projects and activities, Associate&rsquo;s degree and 10+ years of experience supporting IT projects and activities, Bachelor&rsquo;s degree and 8+ years of experience supporting IT projects and activities, or Master&rsquo;s degree and 6+ years of experience supporting IT projects and activities</li><li>
DoD 8570 IAT Level II Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification</li><li>
Ability to obtain a DoD 8570.01-M CSSP Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date</li></ul>
Nice If You Have:<ul><li>
Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool</li><li>
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary</li><li>
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk</li><li>
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer</li><li>
Knowledge of cloud-native security tools, including HBSS</li><li>
Knowledge of Zero Trust principles and concepts</li><li>
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks</li><li>
Ability to work within a collaborative team, and a fast-paced and dynamic environment</li><li>
Possession of excellent written, organizational, presentation, and verbal communication skills</li><li>
AWS, Azure, or GCP Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Information System Security Officer

Kratos Defense

<div>Job Description: 
Readiness Delivered. At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.
Kratos is looking for an ISSO to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&amp;M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.
This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.
Primary Responsibilities:
<ul><li>Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.</li><li>
Participate in regular security self-inspections and audits.</li><li>
Assist with the selection and implementation of security controls and features for systems and applications.</li><li>
Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.</li><li>
Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.</li><li>
Provide product security engineering support and recommendations used to resolve integration and testing issues.</li><li>
Create and refine standard RMF Body-of-Evidence artifacts.</li><li>
Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.</li><li>
Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.</li><li>
Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.</li><li>
Participate in security architecture and design review meetings.</li><li>
Manage system access and revocation requests. Track and verify DoD certification requirements in accordance with DoD 8140 guidance.</li></ul> 

Experience and Skills:<ul><li>
Solid knowledge of the DISA/DoD Risk Management Framework.</li><li>
CompTIA Security+ CE, CASP+, or equivalent cybersecurity certification.</li><li>
Experience with security controls, RMF, and STIGs.</li><li>
Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.</li><li>
Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.</li><li>
Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.</li><li>
Capable of working in a fast-paced team environment.</li><li>
Excellent organizational and communication skills and able to effectively interact with managers and technical staff.</li><li>
A strong familiarity with cloud technologies and compliance requirements for cloud</li><li>
Top Secret clearance with SCI eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.</li></ul>
Preferred Skills and Experience<ul><li>
2 years as an ISSO or equivalent duties.</li><li>
Familiarity with eMASS, XACTA, or similar government systems of record.</li><li>
Familiarity with Zero Trust Architecture (ZTA) requirements.</li><li>
Experience with Windows and RHEL environments.</li><li>
Experience with AWS.</li><li>
Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite &amp; ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).</li></ul>
#LI-Onsite
The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.
Competitive salary based on experience and education 
Salary Range: $110,000-$140,000
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
This posting will close within 90 days from the Posting Date.
 
Job Benefits:<ul><li>
Medical, Dental &amp; Vision Insurance Coverage</li><li>
Life/ADD &amp; Short/Long Term Disability Insurance</li><li>
401(k) Savings Plan</li><li>
Employee Stock Purchase Plan (ESPP)</li><li>
Paid Time-Off (PTO)</li><li>
Holidays</li><li>
Education Reimbursement</li></ul> 
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
Disability Accessibility Accommodation 
If you require an accommodation to navigate or apply to our careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.
Pay Transparency 
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
Job Applicant Privacy Notice 
For applicants in the EU and California residents, please review our privacy notice. 
 
 
 
From: Kratos Defense</div>

<div>Overview:

LMI is seeking a Cybersecurity Information System Security Officer (ISSO) with demonstrated experience managing the security posture of DoD information systems to support a United States Special Operations Command (USSOCOM) mission partner.
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors&mdash;helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.
This position requires an active Secret clearance with the ability to obtain a Top-Secret.
Responsibilities:
<div>
As the ISSO, you are responsible for the day-to-day security operations of one or more information systems and for maintaining the system&rsquo;s Authorization to Operate (ATO) under the DoD Risk Management Framework (RMF). You will serve as the primary point of contact for the ISSM, the Authorizing Official&rsquo;s representative, and the engineering team on all matters of system security.
You will develop and maintain the full body of RMF artifacts&mdash;System Security Plan (SSP), Security Assessment Plan (SAP), Plan of Action and Milestones (POA&amp;M), Continuous Monitoring strategy, Privacy Impact Assessment, and Contingency Plan&mdash;and shepherd packages through eMASS or equivalent.
You will track vulnerabilities, IAVMs, and STIG compliance; manage POA&amp;M closure; coordinate audits and assessments; and review system changes for security impact. You translate policy (NIST 800-53, CNSSI 1253, DoDI 8500.01, 8510.01) into clear engineering guidance.
You proactively solve unusual and/or complex problems with little or no direction given and operate effectively in a fast-paced technical environment supporting senior military leadership.
You partner closely with the Cybersecurity Engineer, the engineering team, and government stakeholders to keep the system secure, compliant, and operational.</div>
Qualifications:
<div>
Required Qualifications</div><ul><li>
Active Secret clearance required with the ability to obtain and maintain a Top-Secret clearance</li><li>
Minimum of 3-years of experience as an ISSO, ISSM, or equivalent role on DoD information systems</li><li>
Demonstrated experience taking systems through the RMF process and achieving/maintaining ATO</li><li>
Hands-on experience authoring and maintaining SSPs, SARs, POA&amp;Ms, and Continuous Monitoring documentation</li><li>
Working knowledge of NIST SP 800-53, NIST SP 800-37, CNSSI 1253, and applicable DoD/CJCS issuances</li><li>
Experience using eMASS, Xacta, or equivalent governance, risk, and compliance (GRC) tooling</li><li>
DoD 8570/8140 IAM Level II certification (Security+ CE, CAP, CASP+, or equivalent) at time of hire</li></ul>
Desired Qualifications<ul><li>
Active DoD Top-Secret Clearance</li><li>
Bachelor&rsquo;s or Master&rsquo;s Degree in Cybersecurity, Information Systems, or related field</li><li>
DoD 8570/8140 IAM Level III certification (CISSP, CISM, or equivalent)</li><li>
Experience supporting Special Operations, Intelligence Community, or Combatant Command customers</li><li>
Experience with cloud ATOs in Azure Government, AWS GovCloud, or Microsoft 365 GCC High</li><li>
Familiarity with DevSecOps, CI/CD security gates, and continuous ATO (cATO) approaches</li><li>
Prior experience as a Security Control Assessor (SCA) or assessment team member</li></ul><div>
Target salary range: $111,426 - $192,890</div><div>
Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.</div><div></div><div> 
#LI-SH1</div><div>
Applicants must meet eligibility requirements for a U.S. Government security clearance. Only US Citizens are eligible for a security clearance. For this position, LMI will only consider applicants with security clearances or applicants who are eligible for security clearances, due to the nature of the work.</div>
EEO Statement:

LMI is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.</div>

Cybersecurity Information System Security Officer (ISSO)

Akima

<div>Company Overview:
<div></div><div>
Akima Data Management (ADM), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</div><div></div><div> 
At ADM, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</div><div></div><div> 
For our shareholders, ADM provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</div><div></div><div> 
For our government customers, ADM delivers agile and innovative cloud and IT services and solutions that enable mission dominance.</div><div></div><div> 
As an ADM employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</div>
Description:

Akima Data Management (ADM) is seeking a highly skilled and mission‑focused Information System Security Officer (ISSO) to support and oversee cybersecurity Governance, Risk, and Compliance (GRC) activities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSO will ensure systems adhere to federal, DoW, and organizational cybersecurity requirements by developing security documentation, validating controls, supporting audits, and guiding risk mitigation efforts. 
The ideal candidate brings deep knowledge of cybersecurity frameworks, strong communication skills, and the ability to collaborate with technical teams, leadership, and external stakeholders. This role is essential to safeguarding OIG&rsquo;s mission‑critical systems and ensuring secure, compliant, and resilient operations across ashore and afloat environments. 
To join our team of outstanding professionals, apply today!
Responsibilities:
<ul><li>Develop, maintain, and enforce cybersecurity policies, plans, standards, and procedures to protect systems and sensitive information.</li><li>
Create, update, and manage System Security Plans (SSPs) and all ISSO‑related documentation in alignment with NIST, FISMA, and DoD frameworks.</li><li>
Ensure all security documentation remains accurate, complete, and audit‑ready throughout the system lifecycle.</li><li>
Conduct and support security risk assessments, vulnerability analyses, and compliance reviews.</li><li>
Document, prioritize, and track remediation of findings to ensure alignment with mission and regulatory requirements.</li><li>
Provide expert guidance on security controls, compliance strategies, and risk mitigation approaches.</li><li>
Support the development, management, and closure of Plan of Actions and Milestones (POA&amp;Ms).</li><li>
Coordinate and support internal and external audits, inspections, and assessments.</li><li>
Prepare and maintain evidence repositories, artifacts, and audit‑ready documentation.</li><li>
Ensure timely responses to findings and drive corrective actions to closure.</li><li>
Collaborate with system administrators, engineers, and development teams to ensure proper implementation and validation of security controls.</li><li>
Review system architectures, configurations, and processes to ensure compliance with applicable frameworks and best practices.</li><li>
Support continuous monitoring activities, including ongoing control assessments and documentation updates.</li><li>
Provide oversight of security incident monitoring, investigation, response, and reporting.</li><li>
Ensure timely mitigation actions and integration of lessons learned into security processes.</li><li>
Serve as a trusted advisor to leadership on emerging threats, regulatory changes, and security posture improvements.</li><li>
Act as a primary communicator with clients, leadership, and external stakeholders on cybersecurity requirements and system security status.</li><li>
Deliver clear updates, briefings, and recommendations to ensure alignment between cybersecurity activities and mission objectives.</li><li>
Translate complex security requirements into actionable guidance for technical and operational teams.</li><li>
Educate and train personnel on information security best practices, compliance requirements, and secure system operations.</li><li>
Monitor emerging technologies, policies, and threat trends to recommend enhancements to the organization&rsquo;s security posture.</li></ul>
Qualifications:
<ul><li>Active TOP SECRET with SCI clearance (required).</li><li>
Bachelor&rsquo;s degree and at least 5-10 years of relevant experience, or 10+ years of experience in lieu of a degree.</li><li>
IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.</li><li>
Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity frameworks.</li><li>
Experience developing and maintaining SSPs and other RMF documentation.</li><li>
Strong communication, analytical, and documentation skills.</li></ul>
Job ID: 2026-22943 Work Type: Hybrid</div>

Information System Security Officer - TOP SECRET Clearance REQUIRED with SCI

<div>Cloud Security Engineer
The Opportunity:
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.
You Have:<ul><li>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</li><li>
4+ years of experience with secure IT architecture and computing hardware and software</li><li>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</li><li>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</li><li>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</li><li>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</li><li>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</li></ul>
Nice If You Have:<ul><li>
Experience assessing and authorizing network connections between on-premise and cloud</li><li>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</li><li>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</li><li>
Experience with code management tools such as Git or GitLab in a team setting</li><li>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</li><li>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</li><li>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</li><li>
Ability to work independently and as an integrated member of a project team</li><li>
Possession of excellent verbal and written communication skills</li><li>
TS/SCI clearance</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Cloud Security Engineer

Northrop Grumman

<div>RELOCATION ASSISTANCE: No relocation assistance available
CLEARANCE REQUIRED FOR START: Yes
CLEARANCE TYPE: Top Secret
TRAVEL: Yes, 25% of the Time<h2 class="jobSectionHeader">
Description</h2>
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work &mdash; and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
At the heart of Defining Possible is our commitment to missions. In rapidly changing global security environments, Northrop Grumman brings informed insights and secure technological solutions to enable strategic objectives. We&rsquo;re looking for innovators, who can help us keep building on our wide portfolio of secure, affordable, integrated, and multi-domain systems and technologies that fuel those missions. By joining in our shared mission, we will support yours of expanding your personal network and developing skills, whether you are new to the field or an industry thought leader. At Northrop Grumman, you will have the resources, support, and team to do some of the best work of your career. 
Leaders, We Want You! 
Information system assets everywhere are under siege from a wide spectrum of threats. Almost daily, these threats grow in sophistication, breadth and speed.
At Northrop Grumman, we take a holistic approach to cybersecurity and computer systems analysis, looking at the whole landscape of people, processes and technology and the whole security and IT realm of support. Thought leadership demands nothing less.
The Northrop Grumman Chief Information &amp; Digital Office (CIDO) is seeking a second level (Level 2) Manager Computer Systems Analysis 2 to lead a team of Information Systems Professionals (ISSOs/ISSMs/SA's). A diverse classified information systems security and information systems background is required, including the Intelligence Community assessment and authorization process (ICD-503), Special Access Programs (JSIG) and DoD collateral (NISPOM and DAAPM) processes.
The Manager of Classified Computer Systems Analysis will supervise a large team of professionals. The team performs assessments of systems and networks within the networking environment, or enclave, and will identify where those systems and/or networks deviate from the acceptable configuration, enclave policy, or local policy. This is achieved through passive evaluations, such as compliance audits, as well as active evaluations like vulnerability assessments. This position will help the employees establish strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems.
Includes:<ul><li>
Support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.</li><li>
Assist in the implementation of the required government policy (i.e., DAAPM, JSIG, ICDs), make recommendations on process tailoring, participate in and document process activities.</li><li>
Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.</li><li>
Support the formal Security Test and Evaluation (ST&amp;E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.</li><li>
Document the results of Assessments and Accreditation activities, technical or coordination activity and prepare the Body of Evidence (BoE) and including updating the Plan of Actions and Milestones (POA&amp;M) as required.</li><li>
Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed.</li><li>
Ensure the management/coordination with classified programs on the design, testing, and implementing of state-of-the-art secure operating systems, networks, database products, firewalls, and network architectures to meet government classified Cyber Information Assurance compliance requirements.</li><li>
Ensure environments remain compliant and all associated systems/networks achieve and maintain formal accreditation authorizations from government agencies.</li></ul>
Establish an inclusive culture within a diverse environment, and will be responsible for the following:<ul><li>
Perform as the Manager and supervise a team of Classified Cybersecurity Analysts and Information System Security Officers (ISSO)</li><li>
Foster an environment for individual development, teamwork, effective performance management, open communication, financial management, and utilization</li><li>
Establishment of a strict program control processes to ensure mitigation of risks and supports obtaining formal Assessment &amp; Authorization of systems</li><li>
Assist in the implementation of the required government policy (i.e. DAAPM, JSIG, ICD-503). This may include project management.</li><li>
Ensure the team follows Northrop Grumman and the Cyber ISS organizations policies and procedures, making sure that all information is accurate and complete in support of those policies and procedures</li><li>
Support the formal Security Assessment process required by the company or government customer</li><li>
Effectively communicate with program management teams, the Enterprise Services Program Management Office Team, the Information Technology Organization, and Industrial Security</li><li>
Assist in the interview and selection process of new employees</li></ul> 
If you are ready to solve complex problems in a dynamic environment, apply today! 
Note- Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply, only if they are willing to work on-site. 
Basic Qualifications:<ul><li>
Master&rsquo;s degree with 6 years of IT or Information Systems experience; OR a Bachelor's degree with 8 years of IT or Information Systems experience is required</li><li>
Must have work experience in the one (or more) of the following areas: Special Access Programs (SAP), and / or Sensitive Compartmented Information (SCI) programs</li><li>
Candidates must have a current Top Secret level security clearance (at a minimum), to include a closed investigation date completed within the last 6 years OR must be enrolled in the Continuous Evaluation (CE) Program, in order to be considered</li><li>
Candidates must have the ability to obtain, and maintain, access to Special Programs as a condition of continued employment
</li></ul>Preferred Qualifications:<ul><li>
The ideal candidate will have a Master's Degree in information Systems, Information Security, or similar STEM related discipline, to include 7 years of ISSO/ISSM experience or Server Administration experience, to includ knowledge ofr STIGs / RMF / eMASS</li><li>
Prior leadership, or management, experience is highly desirable</li><li>
Diverse classified information systems security / information assurance background</li><li>
Excellent written and verbal communication skills</li><li>
Prior experience communicating with customer and program leadership</li><li>
Active Top Secret/SCI with SAP/SAR access, or a Polygraph, is nice to have</li></ul> 
We offer flexible work arrangements, phenomenal learning opportunities, exposure to a wide variety of projects and customers, and a very friendly team environment. Our diverse portfolio of programs means there are endless paths to cultivate your career. We also offer exceptional benefits/healthcare, a 9/80 work schedule, and a great 401k matching program. Come join us!
Primary Level Salary Range: $139,800.00 - $209,800.00
The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.</div>

Manager Computer Systems Analysis 2 - Top Secret

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Work You'll Do 
<ul><li>
Application Security: Evaluate, enhance, and document secure software development practices. Lead AppSec assessments, support remediation efforts, and help set security requirements for platforms and custom applications.
</li><li>Compliance &amp; RMF (NIST): Provide deep support for federal compliance initiatives, specializing in NIST 800-53 and RMF processes. Develop control implementation plans, assist with artifacts, advise on audit readiness and manage POAMs
</li><li>DevSecOps (Cloud Security): Guide secure DevOps practices, integrating security into CI/CD pipelines and cloud architectures. Partner with teams to implement security automation and validate environments (AWS,).
</li><li>Vulnerability Assessment &amp; VAT Management: Conduct and coordinate vulnerability scans using Tenable, Inspector, or similar tools. Drive VAT resolution by engaging stakeholders, tracking remediation, and closing findings.
</li><li>Technical Project Delivery: Take charge of critical projects-organizing tasks, managing deadlines, and ensuring results. Handle ad-hoc assignments and maintain excellent documentation.
</li><li>Consulting: Communicate solutions and risks to technical and non-technical stakeholders. Lead and support ISSO activities, compliance reviews, and team enablement.</li></ul> 

The Team 
 
Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology, and outcomes-are designed for impact. Serving federal, state, &amp; local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. 
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals. 
 
Qualifications 
 
Required:
 
<ul><li>Bachelor's degree required.</li><li>
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li><li>
Active Secret Clearance.</li><li>
Ability to work onsite up to two days a week onsite.</li><li>
3+ years in cloud security, security engineering, DevSecOps, or security automation, along with a strong understanding of cloud security fundamentals: IAM, network segmentation, encryption/KMS, secrets management, logging/monitoring, secure storage patterns.</li><li>
Security + certification or similar industry cert.</li><li>
2+ years' experience within the following:</li><li><ul><li>
At least one major cloud platform (AWS or Azure strongly preferred).</li><li>
Demonstrated automation capability:</li><li>
Proficiency in Python, PowerShell, or similar.</li><li>
Experience integrating APIs, automating workflows, and producing auditable outputs.</li><li>
Experience implementing security controls and/or compliance work in regulated environments (federal, healthcare, finance, etc.).</li><li>
Familiarity with Git-based workflows and CI/CD systems.</li></ul></li></ul> 
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html</div>

Cloud Security Engineer, Secret Cleared

Search 10000+ System security officer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 system security officer jobs Near Me

Information System Security Officer

Information System Security Officer

Cybersecurity Information System Security Officer (ISSO)

Information System Security Officer - TOP SECRET Clearance REQUIRED with SCI

Cloud Security Engineer

Manager Computer Systems Analysis 2 - Top Secret

Cloud Security Engineer, Secret Cleared