June 17, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information.
Falls Church, VA1 day ago
Experience: 8+ years in a technical Cybersecurity Engineering role, with at least 4 years focused on large-scale cloud or hybrid environments, and a portfolio of projects where AI or Machine Learning was directly applied to solve security or operational scaling problems. • API-First Automation: Deep expertise in building "glue code" that connects disparate COTS and custom applications via secure, automated APIs to streamline cross-functional business activities.
Our capabilities range from C5ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Our workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.
Washington, DC30+ days ago
We're seeking a strategic, client-focused, and technology-driven services leader who thrives at the intersection of mission enablement and innovation-someone who understands both federal procurement dynamics and modern technology transformation (cloud, data, artificial intelligence, CRM tools). * Lead and expand Slalom's presence across multiple DHS components; serve as a trusted advisor with deep expertise in at least one component (CBP, FEMA, USCIS, USCG, ICE, TSA, USSS, or CISA).
The entire section leverages agile and works to provide enhanced reporting and global searching capabilities to facilitate task management, cross-utilization, and address national intelligence priorities while protecting confidential data and sources. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.
p>Minimum Requirements (Knowledge, Skills, and Abilities): - Minimum of 7 years of experience collectively with the following:
- Proven work experience as an Information Systems Security Officer or a similar role, preferably in a complex organizational setting. The entire section leverages agile and works to provide enhanced reporting and global searching capabilities to facilitate task management, cross-utilization, and address national intelligence priorities while protecting confidential data and sources.
p>CIBC's Technology Infrastructure and Innovation (TI&I) business spans Technology, Information Security, Deposit Operations, Loan Operations, Payment Operations, Data Management Office, Corporate Real Estate, Corporate Security, Procurement, Operational Resilience, and Risk & Governance. You are an experienced risk leader with a minimum of 10 years of progressive experience in technology risk management, cybersecurity, or controls implementation within a large, complex financial institution (GSIB experience preferred).
p>Shift 1st shift United States of America Hours Per Week 40 Learn more about this role View transcript Close transcript Music in background throughout On screen copy Bank of America logo Technology Architect Technology Architect At Bank of America, I help shape the technology strategy that powers our global business. Information Security Architect - AI & Cloud Security is a senior member of the BISO Secure Solutions Design team responsible for defining secure architecture patterns, assessing emerging AIML solutions, and ensuring alignment with Global Information Security (GIS) policies and enterprise architecture strategies.
Rockville, MD30+ days ago
Responsibilities : The Security Architect, within the Cyber & Information Security will work with the various assigned security teams:Identify the security requirements and approved patterns established/defined across the various security teams. Software Guidance & Assistance, Inc., (SGA), is searching for a Security Architect ( Cyber & Information Security) for a CONTRACT assignment with one of our premier Regulatory clients in the DMV area.
li>Translating "Geek to Greek": The unique ability to explain a highly complex technical vulnerability to a non-technical Board member or leadership team using simple, non-alarmist analogies. Hands-on & Strategic Balance: Proven track record of operating at a high strategic level with the ability to "roll up your sleeves" to troubleshoot complex architectural issues, infrastructure outages, or urgent security incidents alongside engineers.
Washington, District of Columbia9 days ago
li>Provide leadership supporting a team to streamline and maintain a modern compliance model for cybersecurity safeguards, including access controls, MFA, encryption, asset classification, change management, patch management, network segmentation, firewalls, detection technologies including network and endpoint security, insider threat protection, logging and network monitoring, and vulnerability management.
Proactively identify, assess, and prioritize IT risks to data and systems in coordination with OT portfolio management and OERM including internal/external threats, cyber-crimes, and vendor/third-party risks; partner with OERM or relevant stakeholders on the appropriate courses of action to mitigate or eliminate risk.
You will create a new Information Security software build capability, build new data storage and analytics capabilities to enable Data Science use cases, contribute to infrastructure and tooling initiatives for Microsoft Power BI and other reporting and metrics platforms, be the subject matter expert for our internal analytics products, and foster a high-performance culture and cultivate an environment that promotes excellence and reflects the TransUnion brand. You will work across multiple Cyber Fusion Engineering functions including Security Analytics Engineering, Attack Surface Management, and Cyber Threat Intelligence and Cybercrime, with a primary focus on building internally developed systems.
Reston, Virginia30+ days ago
You will work across multiple Cyber Fusion Engineering functions including Security Analytics Engineering, Attack Surface Management, and Cyber Threat Intelligence and Cybercrime, with a primary focus on building internally developed systems. Adherence to Company policies, sound judgment and trustworthiness, working safely, communicating respectfully, and safeguarding business operations, confidential and proprietary information, and the Company’s reputation are also essential expectations of this position.
Washington, DC30+ days ago
Contribute to the ongoing information security initiatives and improvements, development, implementation, and maintenance of information security for FLUOps Serves as an Information Security subject matter expert and participates in the development, implementation, and maintenance of information security for FLUOps Provides guidance and advocacy regarding the prioritization of investments that impact information security Advises management on risk issues related to information security and recommends actions in support of the banks wider risk management and compliance programs Monitors information security trends, internal and external to the bank, and keeps leadership informed Manages quality control and reporting Ensures compliance with policies and laws. Drives GISFLUOps risk deliverables Collaborates with risk partners on info security critical priorities Participates in senior FLUOps specific Risk Management & Business Continuity Routines Identifies and measures global information security GIS controls on most critical business processes or channels.
p>Candidate Resources Chantilly Charleston Colorado Springs Crane El Segundo Fort Meade Hampton Roads Hawaii Huntsville Reston San Diego Southern Maryland St. Louis Washington DC View All Locations Business Management Cyber Cloud Data Science DevSecOps Electrical Engineering Mechanical Engineering Network Engineering Software Engineering Systems Engineering Technical Support View All Career Fields. Please apply through the internal career site here > Address 12010 Sunset Hills Road Reston VA Facebook Page Instagram Feed X Feed Linkedin Page Youtube Page What We Do Mission IT Engineering Services Enterprise IT Professional Services Who We Serve Federal Civilian State and Local Defense Intelligence Community Space Contracts Who We Are About SAIC Investors Newsroom National Imperatives Partnerships Suppliers and Small Business Careers Employee Tools Contact Us 2025 SAIC.
Washington DC Metro, VA30+ days ago
Create and maintain relationships with key business, legal, Employee Success, Internal Audit, technical/engineering stakeholders, and other organizations throughout the company who provide expertise in security requirements and solution management. Support multiple security pillars within Salesforce Government Cloud Division including but not limited to, continuous monitoring activities, advisory, incident response, adoption of AI, and security documentation.
Reston, Virginia30+ days ago
Recognized for the ability to translate technical security gaps into clear, executive-level narratives that facilitate informed risk-management decisions.
JOB DUTIES AND RESPONSIBILITIES
The ISSO Lead must also have extensive experience with security authorization processes, such as Authorization/Certification & Accreditation (A&A) and Authorization to Operate (ATO), along with the ability to develop associated documentation.
About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions.
li>Build and administer core network and systems security controls, including: Next Gen firewalls, ZTNA - Zero Trust Network Architecture, intrusion detection and prevention, anti-malware, application whitelisting, host intrusion prevention, endpoint detection and response (EDR), vulnerability scanners, content monitoring/filtering, and security monitoring (SIEM). This role is responsible for managing the controls that protect the organization''s computer networks, systems, and data from cyberattacks, working closely with IT teams to identify, assess, and mitigate security risks, and supporting incident response to contain the damage from security incidents and prevent future attacks.
p>The Lead ISSO reports to the Security Program Management Office (SPMO) Manager and is responsible for leading a small team supporting system security, authorization, continuous monitoring, and risk management functions across assigned systems. By providing the information below and checking the boxes referenced, you acknowledge and consent to SAIC''s Privacy Policy to include access and use of your information for the purposes of sharing your information for possible employment recruitment effects by SAIC and it''s third party vendors.
NWF is happy to work with the applicant to obtain relevant credit(s) through college/university programming, such as directed independent study (DIS), internship credit hours, etc. For more information on our recruiting process, please review our Careers page: https://www.nwf.org/About-Us/Careers.
Washington Dc, District of Columbia16 days ago
The Senior ISSO will ensure proper access controls are implemented for both system access and physical access to data processing facilities, track and suggest technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access, and research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and network and device security and encryption. Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating Risk Assessment Reports within 0 to 15 days after analysis completion, and producing Weekly Activity Reports and Monthly Program Reports to track progress and compliance.
Arlington, Virginia5 days ago
ul style="margin: 0px; padding: 0px; font-family: verdana;">Demonstrated ability to independently apply advanced ISSO knowledge to manage ATO compliance, facilitate RMF accreditation, and maintain eMASS registrations across NIPRNET, SIPRNET, JWICS, and SAP environments. . - Required Education: Bachelor’s Degree in IT, Computer Science, Cybersecurity, or related field; or equivalent combination of vendor certification (including vendor certification in the technology being applied) and directly relevant professional experience accepted in lieu of degree. .
Arlington, VA30+ days ago
Lead RMF A&A efforts, including activities within the A&A cycle and outside of the ISSO functions, work directly with ISSM, ISO, and AO, work with engineering and operations support staff to secure systems and ensure compliance, and provide oversight for existing and new POAMs. Work with the Security Tools Team to identify Critical / High vulnerabilities for remediation and report network security posture at weekly CISO/AO meeting.
There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, education and certifications as well as contract provisions regarding labor categories that are specific to the position and could fall outside of this range. National Resilience – supporting agencies such as Federal Deposit Insurance Corporation (FDIC), Treasury, Health & Human Services (HHS), National Institutes of Health (NIH), National Oceanic and Atmospheric Administration (NOAA) and the United States Department of Agriculture (USDA).
Tysons Corner, Virginia30+ days ago
Information Security Consultant to leverage their understanding of IC/DOD Risk Management Frameworks (RMF), continuous monitoring, risk scoring, and risk management experience to lead our team of Assessors in conducting rigorous technical testing of security controls across various domains such as access control, cryptography, network security, and incident response for our Intelligence Community customer. Active Top Secret SCI with PolygraphWhat You Will Do:
Guidehouse has an opportunity for a cleared Sr.
With annual revenue of US$57 billion in FY2025, Oracle is the world's largest EHR implementation, serving more than 9.5 million beneficiaries spanning the United States, Europe, and the Asia Pacific region; has 5 million registered members of Oracle's customer and developer communities; and 469 independent user communities in 97 countries representing more than 1 million members. About the Oracle Veteran Internship Program (OVIP):
Oracle is proud to sponsor an internship and integration program that exposes transitioning military veterans and active-duty Military Spouses new to the corporate culture, provides hands-on job-skill training and experience, and offers enhanced professional and personal development.
p>Experience: Have Four years of related specialty IT experience (for example, but not limited to: system engineering, network engineering, information security, application programming, systems design, hierarchical/relational database management, GIS experience, custom report writing or developing and supporting cloud-based software integration). You can learn about our benefits here: https://humanresources.baltimorecity.gov/hr-divisions/benefits.
Washington Dc, District of Columbia16 days ago
Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating POA&Ms within 0 to 15 days after vulnerability identification, and updating System Security Plans, Configuration Management Plans, and Contingency Plans annually or when changes occur. This position requires following the Information Systems Security Officer (ISSO) Guide when developing, updating, or reviewing required security artifacts and tracking and suggesting technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
Hanover, Maryland5 days ago
p>Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. In this role, you’ll tackle diverse challenges across hardware, networking, and systems support — including both unclassified and classified environments.
Annapolis Junction, MD30+ days ago
If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible,” please apply today! ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community.
The ISSE will implement the cybersecurity posture and ensure compliance of classified information systems in support of Department of the Air Force's (DAF) Cloud-Base Command and Control (CBC2) Program. SAIC is seeking a highly motivated, detail-oriented, and experienced Information Systems Security Engineer (ISSE) to join our lead systems integrator team in Arlington, Virginia.
Annapolis Junction, Maryland30+ days ago
Relevant experience in information or cyber security, network security, vulnerability analysis, penetration testing, computer forensics, systems engineering, or network/system administration. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world.
Columbia, Maryland25 days ago
p>Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.
- Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
ASRC Federal Technology Solutions is seeking an Information System Security Officer (ISSO) to support cybersecurity governance, risk management, and compliance activities for systems within the Department of Justice - Office of Justice Programs (OJP). Support continuous monitoring activities, including review of security controls, account management, audit logs, and security impact assessments.
p>Position Overview The role is responsible for administering the Banks Identity and Access Management (IAM) platform and managing key security technologies including Data Loss Prevention (DLP), antivirus/anti malware, Endpoint Detection & Response (EDR), and Network Access Control (NAC). The position ensures secure access, strong endpoint protection, and compliance with HKMA regulatory requirements while supporting daily operations and continuous improvement of the banks security posture.
The Senior ISSO will ensure proper access controls are implemented for both system access and physical access to data processing facilities, track and suggest technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access, and research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and network and device security and encryption. Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating Risk Assessment Reports within 0 to 15 days after analysis completion, and producing Weekly Activity Reports and Monthly Program Reports to track progress and compliance.
Gaithersburg, MD16 days ago
The ISSO is responsible for meeting regulatory and non-regulatory compliance (security best practices) demands, providing leadership over security assessment activities, working across system ownership and management organizations to test security controls, policies, and procedures, providing program management support, team leadership, and participating in and coordinating the support as needed for security assessment and activities The ISSO also manages and enforces government and corporate information security policies, provides training, and educates end users and program staff about proper security practices. The ISSO conducts security and risk assessments as required using a range of security accreditation frameworks (e.g., NIST, RMF, Common Criteria, DoD, the Intelligence Community Directives (ICDs)), and works to mitigate risks by applying security controls effectively to achieve an acceptable degree of operational risk.
Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. Apply system security engineering expertise in areas such as system security design, life cycle, risk management, and security testing, using industry system security engineering methodologies.
Reston, Virginia16 days ago
Apply system security engineering expertise in one or more of the following to: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing. Mantis Security is a leading specialty firm of high caliber talent who specialize in Cyber Operations, Cyber Defense, Information Assurance, Software Development, DevSecOps, Security Engineering, and Cloud Engineering.
Washington, DC30+ days ago
p style="margin-bottom:26px">We are seeking a Junior Level ISSO to carry out the following duties and responsibilities: - Services to support IS Security performed by the Information System Security Officer (ISSO) at a minimum, shall consist of to the following activities:
- Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each IS. The contract’s support functions are: IA Management, Federal Information Security Management Act (FISMA) coordination and reporting, Risk Management Framework (RMF) application, IA compliance measurements and metrics, Assessment and Authorization (A&A), Vulnerability Management, and Cyber Defense support.
The ISSE will collaborate with internal project teams, external agency partners, network engineers, and cybersecurity stakeholders to gather system connectivity details, generate and manage Ports, Protocols, and Services Management (PPSM) documentation, support Authority to Connect (ATC) submissions, and assist with Line of Sight (LOS) testing and troubleshooting. PPSM Documentation & Lifecycle Management - Create, maintain, and validate PPSM spreadsheets; ensure accuracy of ports, protocols, and services; submit PPSMs through the required approval channels; track status through completion.
p>A leading eDiscovery technology and consulting firm headquartered in Washington, DC is looking for a part-time Information Security Compliance Coordinator in the eDiscovery space to support the Director of Compliance with day-to-day compliance-related activities associated with ISO 27001, SOC 2, and CMMC. This position includes working with a variety of internal & external team members including fellow Project Managers, business development team, attorneys, company or government representatives, and other legal staff.
By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. We want every Palantirian to achieve their best outcomes, that's why we celebrate individuals' strengths, skills, and interests, from your first interview to your longterm growth, rather than rely on traditional career ladders.
Washington, DC30+ days ago
The Opportunity: The Senior Information System Security Manager (ISSM) shall provide leadership and oversight for designated Information System Security Officers (ISSOs) and other cybersecurity personnel to support customer systems throughout the Risk Management Framework (RMF) lifecycle. Oversee execution of the NIST Risk Management Framework (RMF) for assigned systems (categorize, select, implement, assess, authorize, and monitor controls), ensuring artifacts and activities for each RMF step are planned, documented, and kept current.
Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating POA&Ms within 0 to 15 days after vulnerability identification, and updating System Security Plans, Configuration Management Plans, and Contingency Plans annually or when changes occur. This position requires following the Information Systems Security Officer (ISSO) Guide when developing, updating, or reviewing required security artifacts and tracking and suggesting technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
p>The fraudulent LinkedIn messages and emails, which do not originate from any Executives LinkedIn account or of UnitedHealth Group's email domains, or those of any of its operating divisions, supposedly conducts an interview via a Zoom meeting, offers a work from home job at Optum, emails an application, sends a fake check by next day delivery through USPS and asks recipients to pay a vendor a large dollar amount. Own the end-to-end security architecture and operational strategy for enterprise edge security platforms, including Cloudflare and Akamai (covering WAF, DDoS, bot management, TLS, DNS, and edge traffic management).