June 25, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. It's a better process: facilitating a continuous ATO through real-time monitoring and dashboards that provide single pane of glass visibility into control compliance, zero-trust built-in to system design from day one, continuous evidence that gives auditors real-time proof instead of point-in-time packages, and an ATO that program teams can inherit rather than pursue.
Annapolis Junction, MD10 days ago
June 17, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
Fort Belvoir, VA7 days ago
li>Facilitated multiple MDA SAPCO working groups to drive policy alignment, process improvement, and inter-directorate coordination, while maintaining program record and DOD-required office files in strict accordance with DODI 5205.11. The Contractor SAP Security Officer (CSSO) – Journeyman will support our government customer by developing, implementing, and managing comprehensive protection strategies across multi-disciplined security environments.
Falls Church, VA2 days ago
Experience: 8+ years in a technical Cybersecurity Engineering role, with at least 4 years focused on large-scale cloud or hybrid environments, and a portfolio of projects where AI or Machine Learning was directly applied to solve security or operational scaling problems. • API-First Automation: Deep expertise in building "glue code" that connects disparate COTS and custom applications via secure, automated APIs to streamline cross-functional business activities.
Springfield, VA8 days ago
p>The ideal candidate will have hands on experience in incident response, CSOC or SOC operations, digital forensics, malware analysis, indicator development, and cyber incident reporting within a DoD, Intelligence Community, or federal cyber environment. • Experience supporting cyber incident response, CIRT, CSOC, SOC, DFIR, threat hunting, or defensive cyber operations.
ul>Support the MCSC Acquisition Program Security Lead (APSL) to ensure that all technology protection document development, updating, and staffing are accomplished as depicted in the Program’s Integrated Master Schedule (IMS) and as described in the Department of Defense Technology and Program Protection Guidebook and the MCSC Acquisition Security Guidebook.
Develop and update Program Protection Plans (PPP) as required by DoD Instruction 5000.83 and described in PDUSD Memorandum, “Document Streamlining – Program Protection Plan (PPP),” July 16, 2011 and the MCSC Acquisition Guidebook.
HII - Mission Technologies is currently seeking a SME Information System Security Manager (ISSM) to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platform designed to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. • 15 years relevant experience with Bachelors in related field; 13 years relevant experience with Masters in related field; 10 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 19 years relevant experience.
HII - Mission Technologies is currently seeking a Senior Information System Security Officer (ISSO) to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platform designed to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. • 10 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.
Fort Belvoir, VA30+ days ago
Will analyze site survey reports, recommend network modernization upgrades, craft network architectures, and assist operations leads in creating deployment plans and executing capability roll outs. Our workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.
Springfield, VA30+ days ago
Engineer Info Assurance 3: 5 years relevant experience with Bachelors in related field; 3 years relevant experience with Masters in related field; 0 years experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 9 years relevant experience. Engineer Info Assurance 2: 2 years relevant experience with Bachelors in related field; 0 years experience with Masters in related field; or High School Diploma or equivalent and 6 years relevant experience.
HII - Mission Technologies is currently seeking an Intermediate-level Cloud Security Engineer to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platform designed to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. • Conducts patch management operations across Advana cloud enclaves by operating vulnerability scanning workflows, identifying required updates, tracking patch applicability, and automating deployment actions aligned with Department of Defense patching directives supporting Joint Staff elements and mission-owner communities.
Our capabilities range from C5ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Our workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.
HII - Mission Technologies is currently seeking Senior-level IaC Engineer to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platformdesigned to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. • Designs and implements automated cloud architectures using Terraform, Ansible, and CloudFormation to support system administration, release management, cybersecurity controls, and continuous integration pipelines across multiple operational enclaves.
HII - Mission Technologies is currently seeking Intermediate-level IaC Engineer to work out of Fairfax, VA in support of the DoD/DoW Advana War Data Platformdesigned to aggregate operational, intelligence, logistics, and sensor data from multiple domains, enable Joint All-Domain Command and Control (JADC2) by providing a common data fabric, and support AI/ML applications for predictive analytics, targeting, and mission planning. "• 5 years relevant experience with Bachelors in related field; 3 years relevant experience with Masters in related field; 0 years experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 9 years relevant experience.
Washington, DC30+ days ago
We're seeking a strategic, client-focused, and technology-driven services leader who thrives at the intersection of mission enablement and innovation-someone who understands both federal procurement dynamics and modern technology transformation (cloud, data, artificial intelligence, CRM tools). * Lead and expand Slalom's presence across multiple DHS components; serve as a trusted advisor with deep expertise in at least one component (CBP, FEMA, USCIS, USCG, ICE, TSA, USSS, or CISA).
The entire section leverages agile and works to provide enhanced reporting and global searching capabilities to facilitate task management, cross-utilization, and address national intelligence priorities while protecting confidential data and sources. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.
p>Minimum Requirements (Knowledge, Skills, and Abilities): - Minimum of 7 years of experience collectively with the following:
- Proven work experience as an Information Systems Security Officer or a similar role, preferably in a complex organizational setting. The entire section leverages agile and works to provide enhanced reporting and global searching capabilities to facilitate task management, cross-utilization, and address national intelligence priorities while protecting confidential data and sources.
p>CIBC's Technology Infrastructure and Innovation (TI&I) business spans Technology, Information Security, Deposit Operations, Loan Operations, Payment Operations, Data Management Office, Corporate Real Estate, Corporate Security, Procurement, Operational Resilience, and Risk & Governance. You are an experienced risk leader with a minimum of 10 years of progressive experience in technology risk management, cybersecurity, or controls implementation within a large, complex financial institution (GSIB experience preferred).
li>Translating "Geek to Greek": The unique ability to explain a highly complex technical vulnerability to a non-technical Board member or leadership team using simple, non-alarmist analogies. Hands-on & Strategic Balance: Proven track record of operating at a high strategic level with the ability to "roll up your sleeves" to troubleshoot complex architectural issues, infrastructure outages, or urgent security incidents alongside engineers.
Washington, District of Columbia10 days ago
li>Provide leadership supporting a team to streamline and maintain a modern compliance model for cybersecurity safeguards, including access controls, MFA, encryption, asset classification, change management, patch management, network segmentation, firewalls, detection technologies including network and endpoint security, insider threat protection, logging and network monitoring, and vulnerability management.
Proactively identify, assess, and prioritize IT risks to data and systems in coordination with OT portfolio management and OERM including internal/external threats, cyber-crimes, and vendor/third-party risks; partner with OERM or relevant stakeholders on the appropriate courses of action to mitigate or eliminate risk.
You will create a new Information Security software build capability, build new data storage and analytics capabilities to enable Data Science use cases, contribute to infrastructure and tooling initiatives for Microsoft Power BI and other reporting and metrics platforms, be the subject matter expert for our internal analytics products, and foster a high-performance culture and cultivate an environment that promotes excellence and reflects the TransUnion brand. You will work across multiple Cyber Fusion Engineering functions including Security Analytics Engineering, Attack Surface Management, and Cyber Threat Intelligence and Cybercrime, with a primary focus on building internally developed systems.
Reston, Virginia30+ days ago
You will work across multiple Cyber Fusion Engineering functions including Security Analytics Engineering, Attack Surface Management, and Cyber Threat Intelligence and Cybercrime, with a primary focus on building internally developed systems. Adherence to Company policies, sound judgment and trustworthiness, working safely, communicating respectfully, and safeguarding business operations, confidential and proprietary information, and the Company’s reputation are also essential expectations of this position.
Washington, DC30+ days ago
Contribute to the ongoing information security initiatives and improvements, development, implementation, and maintenance of information security for FLUOps Serves as an Information Security subject matter expert and participates in the development, implementation, and maintenance of information security for FLUOps Provides guidance and advocacy regarding the prioritization of investments that impact information security Advises management on risk issues related to information security and recommends actions in support of the banks wider risk management and compliance programs Monitors information security trends, internal and external to the bank, and keeps leadership informed Manages quality control and reporting Ensures compliance with policies and laws. Drives GISFLUOps risk deliverables Collaborates with risk partners on info security critical priorities Participates in senior FLUOps specific Risk Management & Business Continuity Routines Identifies and measures global information security GIS controls on most critical business processes or channels.
p>Candidate Resources Chantilly Charleston Colorado Springs Crane El Segundo Fort Meade Hampton Roads Hawaii Huntsville Reston San Diego Southern Maryland St. Louis Washington DC View All Locations Business Management Cyber Cloud Data Science DevSecOps Electrical Engineering Mechanical Engineering Network Engineering Software Engineering Systems Engineering Technical Support View All Career Fields. Please apply through the internal career site here > Address 12010 Sunset Hills Road Reston VA Facebook Page Instagram Feed X Feed Linkedin Page Youtube Page What We Do Mission IT Engineering Services Enterprise IT Professional Services Who We Serve Federal Civilian State and Local Defense Intelligence Community Space Contracts Who We Are About SAIC Investors Newsroom National Imperatives Partnerships Suppliers and Small Business Careers Employee Tools Contact Us 2025 SAIC.
Washington DC Metro, VA30+ days ago
Create and maintain relationships with key business, legal, Employee Success, Internal Audit, technical/engineering stakeholders, and other organizations throughout the company who provide expertise in security requirements and solution management. Support multiple security pillars within Salesforce Government Cloud Division including but not limited to, continuous monitoring activities, advisory, incident response, adoption of AI, and security documentation.
Reston, Virginia30+ days ago
Recognized for the ability to translate technical security gaps into clear, executive-level narratives that facilitate informed risk-management decisions.
JOB DUTIES AND RESPONSIBILITIES
The ISSO Lead must also have extensive experience with security authorization processes, such as Authorization/Certification & Accreditation (A&A) and Authorization to Operate (ATO), along with the ability to develop associated documentation.
About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions.
li>Build and administer core network and systems security controls, including: Next Gen firewalls, ZTNA - Zero Trust Network Architecture, intrusion detection and prevention, anti-malware, application whitelisting, host intrusion prevention, endpoint detection and response (EDR), vulnerability scanners, content monitoring/filtering, and security monitoring (SIEM). This role is responsible for managing the controls that protect the organization''s computer networks, systems, and data from cyberattacks, working closely with IT teams to identify, assess, and mitigate security risks, and supporting incident response to contain the damage from security incidents and prevent future attacks.
p>The Lead ISSO reports to the Security Program Management Office (SPMO) Manager and is responsible for leading a small team supporting system security, authorization, continuous monitoring, and risk management functions across assigned systems. By providing the information below and checking the boxes referenced, you acknowledge and consent to SAIC''s Privacy Policy to include access and use of your information for the purposes of sharing your information for possible employment recruitment effects by SAIC and it''s third party vendors.
NWF is happy to work with the applicant to obtain relevant credit(s) through college/university programming, such as directed independent study (DIS), internship credit hours, etc. For more information on our recruiting process, please review our Careers page: https://www.nwf.org/About-Us/Careers.
Perform and support risk assessments, threat and vulnerability management, audits, and incident response activities, serving as a domain expert in coordination with the Computer Security Incident Response Team (CSIRT). What you will be doing: Acting as the primary information security partner to assigned business lines and operating companies, providing risk insights and practical mitigation guidance to strengthen the enterprise cybersecurity posture.
Washington Dc, District of Columbia17 days ago
The Senior ISSO will ensure proper access controls are implemented for both system access and physical access to data processing facilities, track and suggest technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access, and research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and network and device security and encryption. Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating Risk Assessment Reports within 0 to 15 days after analysis completion, and producing Weekly Activity Reports and Monthly Program Reports to track progress and compliance.
Chantilly, Virginia30+ days ago
li>Shall be knowledgeable of best practices when implementing security controls including SW engineering methodologies, security engineering methodologies, security engineering principles, and secure coding techniques and coordinates activities with A&A stakeholders. System methodologies including: client/server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, LAN, switches, and routers.
Arlington, Virginia6 days ago
ul style="margin: 0px; padding: 0px; font-family: verdana;">Demonstrated ability to independently apply advanced ISSO knowledge to manage ATO compliance, facilitate RMF accreditation, and maintain eMASS registrations across NIPRNET, SIPRNET, JWICS, and SAP environments. . - Required Education: Bachelor’s Degree in IT, Computer Science, Cybersecurity, or related field; or equivalent combination of vendor certification (including vendor certification in the technology being applied) and directly relevant professional experience accepted in lieu of degree. .
Arlington, VA30+ days ago
Lead RMF A&A efforts, including activities within the A&A cycle and outside of the ISSO functions, work directly with ISSM, ISO, and AO, work with engineering and operations support staff to secure systems and ensure compliance, and provide oversight for existing and new POAMs. Work with the Security Tools Team to identify Critical / High vulnerabilities for remediation and report network security posture at weekly CISO/AO meeting.
There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, education and certifications as well as contract provisions regarding labor categories that are specific to the position and could fall outside of this range. National Resilience – supporting agencies such as Federal Deposit Insurance Corporation (FDIC), Treasury, Health & Human Services (HHS), National Institutes of Health (NIH), National Oceanic and Atmospheric Administration (NOAA) and the United States Department of Agriculture (USDA).
Tysons Corner, Virginia30+ days ago
Information Security Consultant to leverage their understanding of IC/DOD Risk Management Frameworks (RMF), continuous monitoring, risk scoring, and risk management experience to lead our team of Assessors in conducting rigorous technical testing of security controls across various domains such as access control, cryptography, network security, and incident response for our Intelligence Community customer. Active Top Secret SCI with PolygraphWhat You Will Do:
Guidehouse has an opportunity for a cleared Sr.
Washington Dc, District of Columbia17 days ago
Critical deliverables include preparing Security Test Plans 90 days prior to testing and Security Test Reports within 15 days after testing, generating POA&Ms within 0 to 15 days after vulnerability identification, and updating System Security Plans, Configuration Management Plans, and Contingency Plans annually or when changes occur. This position requires following the Information Systems Security Officer (ISSO) Guide when developing, updating, or reviewing required security artifacts and tracking and suggesting technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
Hanover, Maryland6 days ago
p>Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. In this role, you’ll tackle diverse challenges across hardware, networking, and systems support — including both unclassified and classified environments.
Chantilly, VA30+ days ago
The Information Security Analyst will leverage their strong technical background and knowledge to support identity, access, and credentialing operations, to include resolving technical access hurdles, managing sensitive documentation, and completing required tasks/actions. Responsibilities include but are not limited to: Supporting a dedicated team at a government location to provide DEERS PII changes, CAC, Token, and Retired Military ID issuance.
Chantilly, VA30+ days ago
p>The typical day for an ISSE supporting the cloud-based applications is as follows:
With annual revenue of US$57 billion in FY2025, Oracle is the world's largest EHR implementation, serving more than 9.5 million beneficiaries spanning the United States, Europe, and the Asia Pacific region; has 5 million registered members of Oracle's customer and developer communities; and 469 independent user communities in 97 countries representing more than 1 million members. About the Oracle Veteran Internship Program (OVIP):
Oracle is proud to sponsor an internship and integration program that exposes transitioning military veterans and active-duty Military Spouses new to the corporate culture, provides hands-on job-skill training and experience, and offers enhanced professional and personal development.
Annapolis Junction, MD30+ days ago
If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible,” please apply today! ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community.
The ISSE will implement the cybersecurity posture and ensure compliance of classified information systems in support of Department of the Air Force's (DAF) Cloud-Base Command and Control (CBC2) Program. SAIC is seeking a highly motivated, detail-oriented, and experienced Information Systems Security Engineer (ISSE) to join our lead systems integrator team in Arlington, Virginia.
Annapolis Junction, Maryland30+ days ago
Relevant experience in information or cyber security, network security, vulnerability analysis, penetration testing, computer forensics, systems engineering, or network/system administration. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world.
Ashburn, Virginia30+ days ago
div class="posting-requirements plain-list">Typically has a Bachelor's degree in Information Security, Engineering, or related field, and 3+ years of experience, or equivalent relevant work experience; e.g., each year of work experience may be substituted for each year of education required.
Required Skills . About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions.
Columbia, Maryland26 days ago
p>Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.
- Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
p>The position combines security operations leadership, regulatory and compliance ownership, and security product responsibility, ensuring that both internal systems and customer‑facing products meet security, resilience, and vulnerability management expectations throughout their lifecycle. This role oversees daily security operations, manages compliance and governance activities, and owns the integration of security and regulatory requirements, including those introduced by the Cyber Resilience Act, into product development, lifecycle management, and operational processes.