Information System Security Officer (ISSO)

Job Title: Information System Security Officer (ISSO)
Location: Chantilly, VA; Arnold, MO (Onsite)
Clearance: Active TS/SCI with CI Polygraph (required)
Employment Type: Full-Time
Education: Bachelor's degree with 12+ years of relevant experience
Salary: Competitive, based on experience and location
Benefits: Health, dental, vision, 401(k), PTO, and more
Application: Apply here, on our Careers Page @ Careers - Metronome, or email your resume to r.derring@wearemetronome.com

Metronome is seeking an experienced Information System Security Officer (ISSO) to support the FS2 Program within the Dissemination Task Order. The ISSO will manage authorizations and risks related to information processing, storage, and transmission across multiple systems. This role ensures compliance with regulatory and non-regulatory requirements, oversees security assessments, enforces security policies, and provides training to staff on best practices. The ISSO will also support vulnerability management, risk assessments, and the integration of secure hardware and software into government systems while collaborating with stakeholders to sustain system accreditations.

• Manage security authorizations and risk assessments in line with NIST, RMF, ICDs, and DoD frameworks.

• Develop, update, and maintain System Security Plans (SSPs), POA&Ms, Security Impact Assessments, and CONOPS.

• Conduct vulnerability scanning, assessments, reporting, and remediation using Nessus and Tenable-ACAS.

• Support A&A and renewal activities with NGA Designated Authorization Officials (DAO/DAOR).

• Maintain records in ServiceNow, XACTA-360, and Leidos-CIO security tools.

• Collaborate with engineers and administrators to implement secure processes, remediate vulnerabilities, and track POA&M status.

• Measure and evaluate defense-in-depth and Zero Trust architectures against known vulnerabilities.

• Perform security audits and assist with remediation activities.

• Provide training, approve user access, and ensure proper identification, authorization, and authentication mechanisms.

• Communicate with leadership and stakeholders regarding program security status and requirements.

• U.S. citizenship required.

• Bachelor's degree and 12+ years of experience in information systems security.

• Active TS/SCI clearance with ability to obtain CI Poly.

• DoD 8570-compliant certification (Security+ or higher).

• Experience with ICD-503 and NIST RMF.

• Proficiency with tools such as XACTA/XACTA 360, HBSS, ACAS, Nessus, and SPLUNK.

• NGA experience.

• 3+ years of experience analyzing and resolving vulnerability scans with Nessus, Tenable Security Center, or similar tools.

• Prior Intelligence Community (IC) experience.