This role pays more than
71%
of similar roles. Most pay
$128,500–$193,000
— the shaded band above.
At the midpoint, this role pays about
$184k
versus about
$161k
for comparable roles.
Based on 239 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
264 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 245 roles with salary data.
Information Systems Security Officer
The Information Systems Security Officer joins the Digital Modernization Sector to support the U.S. Special Operations Command Enterprise Development, Application, and Training mission. This role serves as the lead security officer embedded within a software development team, ensuring cybersecurity compliance throughout the Software Development Lifecycle for Azure-based portal and gateway applications. The individual will manage System Security Plans, Plan of Action and Milestones, and Security Assessment Reports to maintain Authority to Operate across multiple classification levels. Key responsibilities include interpreting DoD policies, NIST RMF guidance, and DISA STIG requirements while overseeing the integration of enterprise services like ACAS, HBSS, BCAP, and PKI/ICAM. The role requires expertise in FedRAMP, eMASS workflows, and DevSecOps methodologies to solve complex security challenges for global network operations, ensuring that specialized forces have secure access to critical information and tools.
Serve as the lead ISSO to ensure cybersecurity compliance throughout the Software Development Lifecycle (SDLC) for Azure-based applications.
Guide development teams in interpreting and applying DoD policies, NIST RMF guidance, and DISA STIG requirements.
Maintain critical security documentation including System Security Plans (SSP), POA&Ms, and SARs to secure and sustain Authorities to Operate (ATO).
Coordinate with Authorizing Officials and stakeholders to manage the accreditation process across multiple classification levels.
Oversee the integration of enterprise cybersecurity services like ACAS, HBSS, BCAP, and PKI/ICAM into system documentation.
Monitor and assess system vulnerabilities while ensuring all audit findings are documented and tracked to closure.
Provide governance input and security policy guidance during Agile and Waterfall development meetings.
What we're looking for
Bachelor’s degree in Cybersecurity, Information Assurance, or related field and 12 years of experience, or a Master’s degree and 8 years of experience.
Active Top Secret security clearance.
Relevant certifications such as CISSP, CAP, or CompTIA CASP+.
Demonstrated knowledge of NIST RMF, eMASS workflows, and DoD cloud accreditation processes.
Experience with XACTA.
Proven experience managing security compliance for cloud-hosted solutions in Azure or similar environments.
Strong understanding of DISA STIGs, NIST 800-53 controls, and vulnerability management processes.
Familiarity with DevSecOps and Agile SDLC methodologies from a governance and compliance oversight perspective.
NIST RMF
Information Assurance
Cybersecurity
Configuration Management
ServiceNow
Risk Assessment
Security Operations
Encryption
DoD 8570
IAM
System Security Plans
Firewalls
Hardware/Software Security
Communication Protocols
NIST RMF
Information Assurance
Cybersecurity
Configuration Management
Risk Assessment
ServiceNow
Encryption
Security Operations
System Accreditation
DoD 8570
IAM
Firewalls
Hardware/Software Security
Communication Protocols