Senior Information System Security Officer (ISSO)

Leidos National Security Sector combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our defense and intel customers’ mission to defend against evolving threats around the world. Our team’s focus is to ensure our customers have the right tools, technologies, and tactics to keep pace with an ever-evolving security landscape and succeed in their pursuit to protect people and critical assets.

The Intelligence Production Solutions Division (IPSD), part of the Decision Advantage Solutions Business Area, is currently seeking an Information System Security Officer (ISSO) for the Chinook Program.  The ISSO will be responsible for managing the authorizations and risks related to the processing, storage, and transmission of information for one or more programs within the Analysis Sustainment portfolio.  The ISSO is responsible for meeting regulatory and non-regulatory compliance (security best practices) demands, providing leadership over security assessment activities, working across system ownership and management organizations to test security controls, policies, and procedures, providing program management support, team leadership, and participating in and coordinating the support as needed for security assessment and activities  The ISSO also manages and enforces government and corporate information security policies, provides training, and educates end users and program staff about proper security practices.

The ISSO conducts security and risk assessments as required using a range of security accreditation frameworks (e.g., NIST, RMF, Common Criteria, DoD, the Intelligence Community Directives (ICDs)) and works to mitigate risks by applying security controls effectively to achieve an acceptable degree of operational risk.  As part of this process, the ISSO performs testing and security assessments to sustain required accreditations.  The ISSO promotes the use of secure hardware and software within the systems affected by government and corporate approval standards.  The ISSO works to ensure all required security policies and practices are effectively applied to systems and ensures security controls implementing these policies are applied and achieve the proper levels of confidentiality, integrity, availability, and privacy protection throughout the system life cycle. 

The ISSO also assists with the execution, analysis, and remediation activities for the vulnerability management program (scanning, assessment, reporting, and mitigation verification) that spans different accreditation entities, three distinct classification domain enclaves (U), (S) and (TS), using the Nessus and Tenable-ACAS vulnerability scanning tools.   

Position may be performed in the following locations below.  Please note Gaithersburg, MD is the program’s primary work location. 

• Gaithersburg, MD

• Alexandria, VA
• Chantilly, VA
• Aurora CO
• St. Louis, MO
• Tucson, AZ

Clearance Level Required:

Top Secret with the ability to be adjudicated for SCI and successfully pass a Polygraph exam.

Primary Responsibilities:

• Develop risk mitigation strategies that contribute to the effectiveness, efficiencies, and performance outcomes for strategic projects, program goals, and business processes.
• Respond to the needs for updates and maintenance of security documentation, especially System Security Plans, Plans of Actions and Milestones (POA&Ms); Security Impact Assessment for proposed system changes, and Concept of Operations that identify and explain how each system satisfies its assigned security control baselines.
• Maintain system security plans and related configuration records in customer Service+ (ServiceNow), XACTA-360 platform, and Leidos-CIO security tools.
• Drive security changes through steering groups and control (review) boards to meet Risk Management milestones.
• Work independently as well as collaboratively to drive security process improvements, especially to address gaps in meeting customer or Leidos security requirements and meet due diligence responsibilities.
• Provide guidance and engage the program lab team to implement secure software and hardware processes, apply government security standards, and commercial best security practices.
• Resolve highly complex security problems by applying technical knowledge, conceptualizing, reasoning, and interpretation of requirements.
• Communicate with Leidos and National Geospatial-Intelligence Agency (NGA) leadership (internally or client) regarding matters of significan