Information System Security Officer (ISSO) / Cybersecurity Specialist supporting mission‑critical federal systems for NASA’s Space Communications and Navigation program.
Locations (2)
Washington, District of Columbia, United States
Greenbelt, Maryland, United States
Responsibilities
Serve as the dedicated ISSO across a multi‑system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles
Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS
Manage and track Plans of Action and Milestones (POA&Ms) and Risk‑Based Decisions (RBDs) through remediation and closure
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams
Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Locations (2)
Washington, District of Columbia, United States
Greenbelt, Maryland, United States
Compensation
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
Responsibilities
Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS.
Design, build, secure, and operate technology systems that support enterprise operations and customer missions while ensuring compliance with government security requirements.
Provide independent second‑line oversight and constructive challenge of first‑line risk assessments, control designs, remediation strategies, risk decisions, and supporting evidence.
Perform oversight across key risk programs including RCSAs, third‑party risk, change risk, incidents, reportable events, issue management, risk acceptances, corrective action plans, and BCM/DR.
Analyze complex technology, data, cybersecurity, cloud, infrastructure, and operational resilience risks to identify gaps, emerging themes, systemic issues, and areas requiring escalation.
Develop clear, evidence‑based second‑line risk opinions and communicate findings, recommendations, and risk insights to senior leaders and key stakeholders.
Support the continued evolution of risk oversight through data analysis, automation, continuous monitoring, and emerging technologies such as Generative AI and Agentic AI.
Manage and track Plans of Action and Milestones (POA&Ms) and Risk-Based Decisions (RBDs) through remediation and closure.
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams.
Coordinate and conduct annual security control assessments, self-assessments, gap analyses, and contingency plan testing/training.
Requirements
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
Nice to have: NASA cybersecurity policies
Nice to have: NASA Space Communications and Navigation (SCaN) operations
Cybersecurity Specialist (ISSO)NewASRC Federal · Washington, US+1 more
Senior Information Security EngineerClarity Innovations · Herndon, US
Information System Security Officer (ISSO)Amazon · Herndon, US
Automation and Observability EngineerEricsson · Karlskrona, Sweden
Staff Technical Account ManagerVasion · Remote, US