Information Systems Security Officer (ISSO)

Peraton is seeking a highly skilled Information Systems Security Officer (ISSO) to join our team supporting the U.S. Customs and Border Protection (CBP). As an ISSO, you will ensure the secure configuration, authorization, and continuous monitoring of CBP systems in alignment with Federal and DHS cybersecurity policies and frameworks. You will work closely with stakeholders, system owners, and security leadership to maintain a robust security posture while supporting CBP’s critical mission to protect our nation’s borders.

Location: Onsite – Washington, D.C. Metro Area

Day to Day Responsibilities:

• Serve as the lead ISSO for one or more CBP-authorized systems, ensuring compliance with FISMA, NIST SP 800-53, DHS 4300A, and CBP-specific policies.
• Develop, review, and maintain key security artifacts including System Security Plans (SSPs), Risk Assessment Reports, POA&Ms, and Security Assessment Reports (SARs).
• Monitor security controls for compliance and effectiveness via Continuous Monitoring (ConMon) activities.
• Support system audits, assessments, and ATO (Authorization to Operate) efforts.
• Provide expert guidance in secure system design and architecture for both on-premise and cloud environments.
• Collaborate with network engineers, system admins, and developers to assess and mitigate vulnerabilities.
• Provide detailed briefings and risk assessments to senior government and Peraton leadership.
• Participate in incident response coordination and security event analysis.
• Represent the ISSO function in system development lifecycle (SDLC) meetings, change control boards, and technical reviews.

Basic Qualifications:

• Bachelors degree and 8 years of experience or a Masters degree and 6 years of experience or an Associates degree and 10 years of experience or a High School diploma and 12 years of experience.
• Must be a U.S. Citizen with the ability to pass a CBP Public Trust clearance.
• Minimum 5+ years of experience as an ISSO or similar cybersecurity role.
• In-depth knowledge of federal cybersecurity standards and policies:
  • NIST SP 800-53, 800-37, 800-30
  • DHS 4300A / 4300B
  • FISMA
  • FedRAMP (preferred for cloud-based systems)
• Strong understanding of networking concepts (TCP/IP, firewalls, IDS/IPS, VPNs, routing/switching).
• Windows Server, Active Directory, Group Policy, and Linux/Unix systems (RHEL, Ubuntu, etc.).
• Strong Knowledge of vulnerability scanning tools (e.g., Tenable/Nessus) and SIEM platforms (Splunk).
• Experience with RMF (Risk Management Framework), security control inheritance, and eMASS or similar GRC tools.
• Excellent writing and communication skills—capable of drafting high-quality documentation and delivering presentations to executive leadership.
• Ability to clearly articulate risks, recommendations, and system posture to technical and non-technical stakeholders.

Preferred Qualifications:

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field; or equivalent experience
• Industry certifications such as CISSP, CISM, Security+,
• Experience supporting DHS, CBP programs, or other DHS Components.
• Familiarity with cloud platforms (AWS, Azure) and cloud security principles.