Information Systems Security Officer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Systems Security Officer based in United States.

This is a high-impact cybersecurity role supporting the modernization of a large-scale, cloud-based federal technology program. You will help establish and maintain security controls across enterprise applications, networks, and cloud environments. The role focuses heavily on Authority to Operate (ATO) activities, security documentation, assessments, and compliance. You will collaborate closely with engineering, IT security, project management, and customer teams to strengthen the overall security posture. The position also involves monitoring security events, assessing vulnerabilities, and developing effective security policies and procedures. You’ll work in an environment that values technical expertise, continuous improvement, and mission-focused delivery. This is a fully remote opportunity offering meaningful exposure to cloud security, federal compliance, and enterprise cybersecurity.

Accountabilities:: Lead and maintain documentation required throughout all phases of the Authority to Operate (ATO) process, coordinating with customer security, engineering, and project management teams to collect required information and maintain accurate security artifacts.

Support ATO assessments and provide active participation throughout assessment activities, ensuring systems and documentation align with applicable security and compliance requirements.

Coordinate security documentation related to configuration management, software development lifecycle processes, system architecture, and other project controls, including the creation of technical diagrams and supporting materials.

Monitor, investigate, and troubleshoot information assurance issues across computing, network, and enclave environments, using security alerts, firewall logs, network traffic, and host-level data to identify potential threats and vulnerabilities.

Assess system and network configurations against established security policies and acceptable configuration standards, identifying gaps and recommending appropriate remediation.

Develop, implement, and maintain enterprise security policies and procedures covering authentication, security incident escalation, auditing, firewalls, encryption, and other security controls.

Support security risk analysis, response planning, incident documentation, vulnerability assessments, and executive-level reporting on security matters.

Manage and monitor software threats and vulnerabilities while evaluating security products, processes, and procedures that can improve operational effectiveness and overall security posture.

Provide direct cybersecurity guidance and support to business and IT stakeholders, translating complex security requirements into practical recommendations.

Apply broad knowledge of networking, databases, systems, web operations, cloud environments, and enterprise security strategies to support secure modernization initiatives.

Requirements:

Bachelor’s degree in Computer Science, Computer Engineering, Computer Programming, or another relevant computer-related discipline.

At least 7 years of experience leading or supporting computer network security monitoring, security investigations, cybersecurity incident response, and resolution of security issues.

At least 3 years of hands-on experience with AWS Cloud Security; AWS security certification is preferred.

At least 4 years of experience supporting Authority to Operate (ATO) processes in AWS environments, particularly within large government agencies.

Demonstrated experience with ATO, FedRAMP, CIS, ISO 27001, and NIST security standards and frameworks.

Strong understanding of identity, credential, and access management (ICAM), Security Information and Event Management (SIEM), and vulnerability management tools.

Experience with CSAM or comparable security compliance and authorization management platforms.

Experience documenting security incidents and conducting security vulnerability assessments.

Experience working with Agile and SAFe teams, including security testing and identifying system and network vulnerabilities.

CISSP certification is preferred.

Strong analytical, problem-solving, communication, and documentation skills, with the ability to collaborate effectively across technical and non-technical teams.

Ability to manage multiple priorities, communicate security risks clearly, and work independently while maintaining strong attention to detail and compliance discipline.

U.S. citizenship is not required, and no security clearance is currently required for the position.

Benefits:

Salary: Estimated annual range of $129,813–$172,500 , with actual compensation based on experience, location, and contractual considerations.

Remote work: Fully remote position with a full-flex work week designed to support flexibility and work-life balance.

Healthcare: Multiple medical plan options, including plans with Health Savings Accounts, plus dental and vision coverage.

Retirement: 401(k) plan with company matching and pre- and post-tax contribution options.

Paid time off: Vacation, sick, personal, and holiday leave, with typically 15 days of paid leave per calendar year plus 10 paid holidays for new employees, subject to applicable policies and prorating.

Family support: Up to 160 hours of paid family leave during a rolling 12-month period for eligible employees.

Insurance: Short- and long-term disability, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident coverage.

Career development: Access to AI-powered career development resources, learning opportunities, and internal mobility support.

Wellness and culture: Comprehensive benefits and wellness programs, with opportunities to grow within a technology and cybersecurity-focused environment.

Schedule: Full-time, 40 hours per week, with no regular travel required.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1