Skip to content

Open nowPosted yesterday

Senior Information Systems Security Officer (ISSO)

SAIC1,038 open roles

Where
Port Hueneme, CA, United States
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Information Systems Security Officer (ISSO)SAIC · Port Hueneme, CA, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SAIC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. SAIC postings stay open a median of 7 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted yesterday

SAIC median: 7 days open

The posting

Job Description

SAIC is seeking a motivated and skilled Senior Information Systems Security Officer (ISSO) to support cybersecurity and compliance activities for mission-critical IT systems on the MAJESTIC Joint Program Office (JPO) Team. In this role, the ISSO will be responsible for implementing, managing, and assessing system security controls to ensure compliance with government regulations, standards, and best practices, including NIST 800-53, RMF, and other federal security policies.

The ideal candidate will work closely with system owners, administrators, and cross-functional security teams to assess risks, maintain security postures, and ensure the confidentiality, integrity, and availability of information systems that support the mission. This role requires on-site support in Port Hueneme, CA.

Key Responsibilities:

  • Ensure compliance with Risk Management Framework (RMF) requirements by developing, maintaining, and assessing system security artifacts, including System Security Plans (SSPs), POA&Ms, and applicable policies and procedures.
  • Implement and validate security controls in alignment with NIST 800-53, associated overlays, and system-specific requirements.
  • Support the Accreditation and Authorization (A&A) process, including preparing documentation and achieving and maintaining system Authority to Operate (ATO) status.
  • Conduct risk assessments and vulnerability analysis, identify potential threats and weaknesses, and provide recommendations for mitigation.
  • Work with IT teams to implement system hardening for platforms, applications, and networks in compliance with DISA STIGs and cybersecurity best practices.
  • Perform continuous monitoring of systems using tools such as Splunk, ACAS, or SolarWinds, ensuring real-time threat detection, event notifications, and security compliance validation.
  • Collaborate with cross-functional teams, including system administrators, developers, and ISSMs, to address security risks, system vulnerabilities, and security incidents.
  • Support incident response activities by conducting forensic analysis, generating reports, and coordinating efforts to remediate and recover from security events.
  • Provide cybersecurity awareness training for users and team members to ensure adherence to organizational security requirements and best practices.
  • Prepare and deliver security status updates, risk reports, and briefings to senior stakeholders and leadership.

Qualifications

Required Qualifications:

Education:

  • Bachelor’s Degree

Certifications (CWF Requirements):

  • Candidates must satisfy 722 (Information Systems Security Manager) requirements, as outlined by Navy COOL. This requirement can be met by possessing one or more of the following qualifying certifications:
  • ISC2 CC (Certified in Cybersecurity)
  • CompTIA Cloud+
  • CompTIA Security+
  • CompTIA SecurityX / CASP+
  • ISC2 SSCP (Systems Security Certified Practitioner)
  • GIAC GSEC (Security Essentials)
  • United America Technologies CISSO (Certified Information Systems Security Officer)
  • ISC2 CGRC / CAP (Certified in Governance, Risk, and Compliance)
  • EC‑Council CCISO (Certified Chief Information Security Officer)
  • ISC2 CCSP (Certified Cloud Security Professional)
  • GIAC GCSA (Cloud Security Automation)
  • GIAC GMON (Continuous Monitoring)
  • ISACA CISM (Certified Information Security Manager)
  • ISC2 CISSP (Certified Information Systems Security Professional)
  • ISC2 CISSP‑ISSMP (Information Systems Security Management Professional)
  • Federal IT Security Institute FITSP‑M (Federal IT Security Professional – Manager)
  • GIAC GCIA (Certified Intrusion Analyst)
  • GIAC GCIH (Certified Incident Handler)
  • GIAC GICSP (Global Industrial Cyber Security Professional)
  • GIAC GSLC (Security Leadership)

OR This requirement can be met through:

  • A Bachelor’s Degree in Cybersecurity, Computer Science, IT, or a related field.

Experience:

  • 2-5 years of professional experience managing and supporting enterprise-level IT environments.

Technical Skills:

  • Deep understanding of security frameworks, including NIST 800-53, RMF, and/or DoD 8510.01.
  • Experience developing and maintaining System Security Plans (SSPs) and managing POA&Ms for compliance and audit purposes.
  • Proficiency with vulnerability scanning tools and security analysis platforms, such as Nessus, ACAS, or Qualys.
  • Knowledge of security controls implementation and system hardening using DISA STIGs or CIS Benchmarks for platforms and network-enabled devices.
  • Familiarity with monitoring tools such as Splunk, SolarWinds, or other SIEM solutions for proactive security monitoring and incident management.
  • Strong understanding of Windows Server and Active Directory security, including account policy configurations and group policy enforcement.
  • Basic knowledge of Red Hat Enterprise Linux (RHEL) for security configurations and patching.
  • General understanding of networking concepts, security configurations, and protocols (e.g., TCP/IP, VLANs, IPsec, firewalls).
  • Ability to conduct risk assessments, analyze vulnerabilities, and make actionable recommendations to remediate threats.
  • Strong analytical and technical writing skills for maintaining security documentation, incident reports, and audit artifacts.

Preferred Certifications (In Addition to CWF Requirements):

  • Certified Information Systems Security Professional (CISSP) or equivalent advanced certifications.
  • Knowledge of continuous monitoring tools and automated compliance tracking systems.
  • Familiarity with encryption standards, PKI infrastructures, and secure key management practices.
  • Hands-on experience with virtualized environments and hyper-converged platforms, such as VMware or Nutanix.
  • Familiarity with ITIL v4 frameworks for managing IT operations and processes.

Clearance Requirement:

  • Active TS/SCI clearance with the ability to obtain and maintain a TS/SCI with Poly.
  • Candidate must be a US Citizen

Work Environment and Notes:

  • On-Site Work: All work must be conducted on-site in Springfield, VA.
  • Program Scope: Supports on-premises enterprise IT environments, including virtualized Windows servers, MS SQL Server databases, and networking layers.

Subcontractor Role: Responsibilities and compensation vary based on the subcontract agreement, with a competitive salary aligned to market rates and role-specific requirements.

About Us

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SAIC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on SAIC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    SAIC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.