Information Systems Security Officer (ISSO)

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world.

To be eligible for this position, you must be a U.S. Citizen. This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status.

 Export Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).

Please review the job details below.

This position requires an active U.S. Government security clearance at the TS/SCI level with CI polygraph.

Vantor is seeking an Information Systems Security Officer (ISSO) to support secure, compliant, and mission-focused systems serving Object-Based Intelligence (OBI) requirements, enterprise ontologies, knowledge graphs, semantic data integration, and advanced analytics.

The ISSO will support the security authorization, operation, and continuous monitoring of information systems throughout the system development and operational lifecycle. This position will work closely with Government stakeholders, the Information Systems Security Manager (ISSM), security engineers, system owners, developers, DevSecOps personnel, data engineers, and mission users to implement security controls, manage risk, and ensure systems remain compliant with applicable security requirements.

The ideal candidate is experienced in Risk Management Framework (RMF) activities, security documentation, vulnerability management, continuous monitoring, incident response, and working in Agile or DevSecOps environments.

Responsibilities:

• •Support the implementation and maintenance of security programs for classified information systems throughout the system lifecycle.
• •Support RMF activities, including system categorization, control implementation, assessment preparation, authorization support, and continuous monitoring.
• •Develop, maintain, and update security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security assessment materials, contingency plans, configuration management documentation, and related artifacts.
• •Coordinate with the ISSM, Information System Security Engineer (ISSE), system owners, Government security personnel, and Authorizing Official representatives to address security requirements and risks.
• •Monitor system security posture and ensure security controls are implemented, documented, tested, and maintained.
• •Track vulnerabilities, POA&M items, security findings, configuration issues, and corrective actions through closure.
• •Support vulnerability scanning, compliance assessments, security testing, penetration testing, and remediation activities.
• •Review system changes, software releases, infrastructure updates, and configuration modifications for security and compliance impacts.
• •Partner with DevSecOps, software development, platform, cloud, data, and infrastructure teams to integrate security throughout the development and deployment lifecycle.
• •Support secure implementation of enterprise ontologies, knowledge graphs, semantic data services, APIs, data integrations, and mission applications.
• •Monitor security-relevant events, logs, alerts, and system activity; support investigation, documentation, escalation, and reporting of security incidents.
• •Support incident response, cybersecurity event handling, and coordination with Government security and cybersecurity organizations.
• •Prepare for and support security inspections, audits, authorization reviews, and Government assessments.
• •Ensure system users, administrators, and project personnel complete required security training and comply with established security procedures.
• •Provide security guidance to technical teams and stakeholders while balancing mission needs, operational risk, and compliance requirements.
• •Maintain accurate security records, metrics, status reports, and briefings for technical leadership and Government stakeholders.
• •Participate in Agile ceremonies, technical reviews, operational demonstrations, release planning, and change management activities as needed.
• •Support knowledge transfer and provide security guidance to Government personnel and project team members.

Minimum Qualifications:

• •Must be a U.S. citizen and possess an active TS/SCI clearance with CI polygraph.
• •Demonstrated experience working as an ISSO, Information System Security Manager, security analyst, cybersecurity analyst, or in a similar information assurance role.
• •Experience supporting RMF activities and security authorization processes for classified or Government information systems.
• •Experience developing and maintaining security documentation, including SSPs, POA&Ms, security assessment materials, and continuous monitoring artifacts.
• •Experience implementing, assessing, and monitoring security controls in accordance with applicable Government cybersecurity policies and standards.
• •Experience with vulnerability management, security assessment, configuration management, incident response, and remediation tracking.
• •Experience working with system owners, ISSMs, ISSEs, Government stakeholders, developers, and technical teams.
• •Experience supporting security activities within Agile, DevSecOps, cloud, platform, or continuous delivery environments.
• •Familiarity with cybersecurity and lifecycle management tools used for vulnerability tracking, compliance monitoring, ticketing, and documentation.
• •Strong written and verbal communication skills, with the ability to communicate security requirements and risks to both technical and non-technical stakeholders.

Preferred Qualifications:

• •Experience supporting Object-Based Intelligence, Intelligence Community, or Department of Defense mission systems.
• •Experience supporting systems involving enterprise ontologies, knowledge graphs, Semantic Web technologies, data integration, AI/ML, advanced analytics, or knowledge management.
• •Experience supporting classified systems operating in cloud, hybrid-cloud, OpenShift, virtualization, or containerized environments.
• •Familiarity with security controls and assessment methodologies associated with NIST, RMF, DoD, Intelligence Community, or other Government cybersecurity frameworks.
• •Experience supporting DevSecOps security practices, secure software development, continuous monitoring, and iterative software releases.
• •Experience with security tools and processes for vulnerability scanning, configuration compliance, endpoint security, network monitoring, log analysis, and incident management.
• •DoD 8570/8140 baseline certification or equivalent cybersecurity certification, as applicable to the position.
• •Security+, CISSP, CAP, CISM, or other relevant cybersecurity certification.
• •Experience facilitating collaboration among Government stakeholders, security teams, technical personnel, and operational users in complex mission environments.
• •Experience supporting security training, security briefings, operational readiness activities, and knowledge transfer.

Pay Transparency: To support pay transparency, Vantor includes salary ranges in all U.S. job postings. Starting pay for this role will fall within the listed range and will be based on factors such as experience, qualifications, skills, location, and market conditions. Candidates who meet the minimum requirements for the role should not expect to receive compensation at the top of the range. The listed range reflects the expected pa