Job Description

Salary: $107,900 - 195,050 per year Requirements:

• We require practical experience applying the ICD-503 Risk Management Framework.
• We need hands-on experience with XACTA for tracking, documenting, and validating accreditation packages.
• We expect a solid understanding of DoD and Intelligence Community security policies and mandates.
• We look for experience reviewing existing ATO documentation, spotting gaps or outdated information, and coordinating with support teams to gather what is needed.
• We value strong time management skills.
• We require excellent verbal and written communication abilities.
• We seek a proven ability to work effectively both independently and with colleagues and external support groups.
• We need experience using IT Service Management platforms such as ServiceNow or Remedy.
• U.S. citizenship is required due to the nature of our government work.
• A TS/SCI clearance with polygraph is required, or a TS/SCI clearance with the willingness to obtain and maintain a polygraph.
• We require a bachelors degree in a technical discipline with at least 8 years of relevant experience, or a masters degree with 6 years of relevant experience; additional experience may be considered in lieu of a degree.
• We require, at minimum, DoDM 8140.03 IT System Admin Intermediate certification qualifications, such as Cloud+, GICSP, SSCP, Security+ CE, GSEC, or higher.
• Preferred: an active CISSP or ISACA CISM certification.

• We author, review, and refresh accreditation packages and supporting records to preserve existing ATO status across production systems.
• We validate customer-provided engineering documentation to ensure it is complete and usable for initial ATO submission.
• We maintain SSPs and related configuration records in XACTA, ServiceNow, or another CMDB tool.
• We develop, monitor, and update POA&Ms to capture open risks and vulnerabilities through mitigation or remediation.
• We work both independently and collaboratively to improve security processes, strengthen enterprise security posture, and maintain due diligence.
• We communicate effectively through briefings, meetings, emails, and collaboration tools with program leadership and government stakeholders.
• We apply deep information security knowledge across enterprise services and systems.
• We coordinate A&A renewal activities with the DAO, DAOR, and Cyber Security representatives to keep accreditations current throughout the system lifecycle.
• We review, update, and maintain CONOPs, disaster recovery plans, and other required system documentation.
• We partner with system administrators, operations teams, and engineering staff to remediate vulnerabilities and report outcomes to Cyber Security.
• We document, track, and secure approval for vulnerabilities that cannot be remediated through POA&Ms, risk acceptance requests, or other required processes.
• We mentor coworkers, system administrators, and leadership on emerging security best practices and their impact on production environments.

• Cloud
• CMDB
• Support
• Security
• ServiceNow
• DevOps
• ITSM

More:

We are Leidos, an industry and technology leader delivering smarter, more efficient digital and mission innovations to government and commercial customers. We are seeking an Information System Security Office (ISSO) to support a large enterprise IT contract for the Department of Defense, focused on maintaining accreditation, managing risk, and sustaining secure operations across multiple enclaves. Our team operates with a strong mission-driven culture, and we offer competitive compensation along with health and wellness programs, income protection, paid leave, and retirement benefits. We are headquartered in Reston, Virginia, employ about 47,000 people globally, and reported approximately $16.7 billion in annual revenue for fiscal year 2025.

last updated 25 week of 2026

Job Tags

Similar Jobs