Jobs and Careers
CA
Information Systems Security Officer (ISSO)– Secret Clearance
CALNET, Inc.Washington, United Statesfull_timeVerifiedPosted 26 Feb 2026
About the role
Founded in 1989, CALNET Inc. has become one of the fastest growing privately held companies in the Technology, Intelligence Analysis, and Language Services consulting arena. Headquarters in Reston, VA, CALNET employees deliver true value to our customers by employing best practices, and world-class technologies industry expertise in every project. CALNET is ISO 9001, ISO 20000, and CMMI-Level III certified As a Prime Government Contractor for a major government institution, we are currently searching for a talented Information Systems Security Officer (ISSO) with Secret Clearance to work in Washington DCPosition Overview
- The Information Systems Security Officer (ISSO) is responsible for ensuring the security posture, compliance, and continuous monitoring of Government Secure Data Network systems in accordance with FISMA, NIST SP 800-53, CNSSI 1253, DoD directives, and Treasury security policies.
- The ISSO provides technical security oversight, supports Security Assessment & Authorization (SA&A) activities, manages Plans of Action & Milestones (POA&M), conducts vulnerability analysis, and ensures systems maintain Authorization to Operate (ATO) status. The ISSO works closely with the Federal Information System Security Manager (ISSM), Program Manager, Data Center Operations, and Service Desk teams.
- Develop, maintain, and update:
- System Security Plans (SSPs)
- Risk Assessment Reports
- Security Assessment Reports (SARs)
- Contingency Plans
- Authorization to Operate (ATO) documentation
- Define system boundaries, inventories, interconnections, and responsible officials.
- Support Risk Management Framework (RMF) lifecycle activities.
- Conduct control selection, implementation validation, and security testing.
- Ensure compliance with NIST SP 800-53, CNSSI 1253, DoD, and Treasury directives.
- Monitor and analyze vulnerability scans (ACAS, SCAP).
- Review and validate STIG compliance.
- Conduct log analysis using tools such as Splunk.
- Track remediation timelines and validate closure evidence.
- Ensure 90% of POA&M items are completed or re-baselined prior to due date.
- Provide weekly vulnerability/risk reporting.
- Develop and manage POA&M documentation.
- Coordinate with system owners to ensure timely remediation.
- Provide 30/60/90-day remediation tracking.
- Report POA&M status to leadership and COR.
- Maintain compliance metrics and documentation in Treasury authoritative systems.
- Support Cyber Security CIRC and Incident Response processes.
- Conduct and participate in:
- Monthly Incident Response exercises
- Monthly Contingency Response exercises
- Annual DR/COOP exercises
- Report security incidents within required timelines (≤ 2 hours for reporting metrics).
- Prepare annual Security Incident Response reports.
- Ensure all IT assets are configured per Government baseline configurations.
- Validate security settings before implementation.
- Document configuration deviations and manage waiver process.
- Support HBSS compliance (HIPS, Policy Auditor, ABM, RSD, DCM).
- Ensure patch compliance meets 100% ± 2% security patching requirements.
- Assist in:
- FOIA-related searches
- Litigation support
- File recovery and disk recovery
- Encryption/decryption activities
- Conduct forensic analysis using industry-standard tools.
- Develop and update:
- Security Operational Documentation
- Privacy Impact Assessments
- Incident Response Plans
- Business Impa
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s