A bachelor's degree in cybersecurity, computer science, information assurance, or a related field is required.
Seven to ten years of experience in information systems security, cybersecurity, or related fields is required.
Hands-on experience with the JSIG and AFIC TS/SCI ATO development process is required.
An 8570/8140 IAT Level 1 certification or greater is required.
Knowledge of NIST 800-53, the Risk Management Framework (RMF), FISMA, and DoD security controls is required.
Experience examining and understanding system hardware and software security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), equipment specifications, practices, and procedures, and assessing controls and artifacts to verify ATO readiness is required.
Ability and willingness to assist with executing the Incident Response Plan, specifically data spillage cleanup, is required.
Ability and willingness to prepare weekly, monthly, quarterly, bi-annual, and annual continuous monitoring reports to support a perpetual ATO is required.
Ability and willingness to recommend software packages for use in secure spaces is required.
Expertise in SIEM tools, vulnerability scanning, encryption, and secure network architecture, with hands-on ATO development for SAP, AFIC, and unclassified ATOs, is required.
Ability to create professional reports for system owners and technical staff that accurately describe test events and results for highly complex requirements is required.
U.S. citizenship is required.
An active U.S. Government Top Secret security clearance is required.
Responsibilities
Ensure information systems comply with NIST 800-53, RMF, and other security frameworks.
Conduct risk assessments, vulnerability management, and mitigation planning.
Perform audit log reduction and analysis, as well as SIEM tuning and configuration.
Maintain Authority to Operate requirements for classified systems.
Oversee security operations, threat analysis, and intrusion detection.
Develop and execute incident response plans to protect sensitive data.
Implement continuous monitoring strategies to proactively identify threats.
Develop security policies, procedures, and guidelines aligned with DoW regulations.
Ensure audit readiness and proper documentation of security controls.
Manage security training programs to promote best practices.
Work with program teams, IT teams, and security personnel to strengthen SDL’s cybersecurity posture.
Advise leadership on emerging threats and risk management strategies.
Lead security assessments and interface with Government agencies, including DoW entities.
Desired Qualifications
A master's degree in cybersecurity, computer science, information assurance, or a related field is preferred.
DoD 8570/8140 IAM Level 3 certification, such as CISSP, CISM, CISA, CGRC, or equivalent, is preferred.
Ability to understand, explain, and mitigate non-implemented controls is preferred.
Familiarity with interconnection agreements and memorandums of understanding is preferred.
Detailed understanding of customer-centric RMF workflows and ability to explain that knowledge to internal and external customers is preferred.
In-depth understanding of network topologies, protocols, network hardware such as switches and routers, and hardening techniques is preferred.
Knowledge of complex network environments involving shared networks and multiple security enclaves is preferred.
In-depth understanding of cybersecurity policies and procedures for government-sector information systems is preferred.
Hands-on experience with eMASS and Xacta ATO submission processes is preferred.
Ability to translate technical implementation language into commonly understood security terminology is preferred.
Technical knowledge and experience implementing cybersecurity policies and procedures is preferred.
Experience working with System Administrators, Developers, and Systems Engineers is preferred.
Familiarity with developing and maintaining system security documentation is preferred.
Ability to work under limited supervision is preferred.
Job ID: 9777 Date Posted: October 12, 2026 Location: Albuquerque, NM
Space Dynamics Laboratory (SDL) is seeking an experienced Information Systems Security Officer (ISSO) to lead security efforts, ensuring compliance with federal regulations and industry best practices. We are seeking an experienced Information Systems Security Officer (ISSO) with hands-on demonstrated experience developing unclassified, SAP, and TS/SCI ATO packages to ensure compliance with federal regulations and industry best practices. The primary work location will be in Albuquerque, NM but occasional travel may be required.
Ensures information systems comply with NIST 800-53, RMF, and other security frameworks
Conducts risk assessments, vulnerability management, and mitigation planning
Performs audit log reduction and analysis as well as SIEM tuning and configuration
Maintains Authority to Operate (ATO) requirements for classified systems
Incident Response & Continuous Monitoring
Oversees security operations, threat analysis, and intrusion detection
Develops and executes incident response plans to protect sensitive data
Implements continuous monitoring strategies to proactively identify threats
Policy Development & Documentation
Develops security policies, procedures, and guidelines in alignment with DoW regulations
Ensures thorough audit readiness and proper documentation of security controls
Manages security training programs to promote best practices
Collaboration & Leadership
Works closely with program teams, IT teams, and security personnel to strengthen SDL’s cybersecurity posture
Serves as a trusted advisor for leadership on emerging threats and risk management strategies
Leads security assessments and interfaces with Government agencies (e.g., DoW entities)
Required Qualifications:
Bachelor’s degree in cybersecurity, computer science, information assurance, or a related field
Must have 7-10 years of experience in information systems security, cybersecurity, or related fields
Hands-on experience with the JSIG and AFIC TS/SCI ATO development process
8570/8140 IAT Level 1 certification or greater
Knowledge of Security Frameworks: NIST 800-53 Risk Management Framework (RMF), FISMA, and DoD security controls
Experience with examining and understanding security documentation for system hardware and software, to include System Security Plan (SSP), Plan of Action and Milestones (POA&M), equipment specifications, practices, and procedures including assessment of controls and artifacts to verify the system is ATO ready
Ability and willingness to assist in the execution of the Incident Response Plan, specifically in Data Spillage Cleanup
Ability and willingness to prepare the weekly, monthly, quarterly, bi-annual, and annual ConMon reports to push towards a perpetual ATO
Ability and willingness to recommend software packages for use in secure spaces
Technical Skills: Expertise in SIEM tools, vulnerability scanning, encryption, and secure network architecture, and demonstrated hands-on ATO development for SAP ATOs, AFIC ATOs, and unclassified ATOs
Ability to create professional reports for system owners and technical staff that accurately describe test events and results for highly complex requirements
Must be a U.S. citizen
Must have an active U.S. Government Top Secret (TS) security clearance
Preferred Qualifications:
Master’s degree in cybersecurity, computer science, information assurance, or a related field
Certifications: DoD 8570/8140 IAM Level 3 i.e. CISSP, CISM, CISA, CGRC, or equivalent
Ability to understand, explain, and mitigate non-implemented controls
Familiarity with various interconnection agreements and memorandums of understanding
Detailed understanding of customer-centric RMF workflows and the ability to articulate that knowledge to internal and external customers
In-depth understanding of network topologies, protocols, hardware (switches, routers, etc.) and hardening techniques
Knowledge of the complex network environments involving shared networks and multiple security enclaves
Displays in-depth understanding of cybersecurity policies and procedures for government sector information systems
Hands-on experience with eMASS and Xacta ATO submission process
Must possess the ability to bridge the technical implementation (i.e., developer talk) into commonly understood security words
Technical knowledge and experience to implement cybersecurity policies and procedures
Experience working with System Administrators, Developers, and Systems Engineers
Familiarity with developing and maintaining system security documentation
Ability to work under limited supervision
*Salary Range
$105,000 - $156,000
Salary commensurate based on education and relevant experience
This range serves as a general guideline and may vary based on factors such as role, level, location, market conditions, and individual qualifications, including job-related skills, experience, and relevant education or training. The range displayed in the job advertisement reflects the minimum and maximum target salaries across all US locations. Specific salary details for a candidate’s preferred location can be provided by the recruiter or HR manager during the hiring process.
Why Join SDL? *SDL offers competitive salaries and a comprehensive benefits package. Visit our Benefits Page to learn more about what we offer.
SDL delivers advanced multi-domain solutions to protect national security and enable scientific discovery. Our expertise in satellites, sensors and instruments, ground systems and data processing, and autonomous systems plays a critical role in missions supporting NASA and the Department of Defense. Join our team of engineers, scientists, technicians, and business professionals in our seventh decade of delivering mission success.
At SDL, we strive to uphold a culture of respect, collaboration, empowerment, and accountability. We listen with open minds, seek to understand diverse perspectives, and engage in thoughtful dialogue. We work together by sharing knowledge, involving others, and offering support. We trust and empower our team members to take ownership, act with integrity, and be accountable. Above all, we deliver on our commitments to each other and to our mission partners.
The application window for this position is expected to remain open for approximately 7 days; however, it may be shortened or extended depending on business needs and the availability of qualified candidates. We encourage interested candidates to submit their applications promptly.
For questions, assistance, or accommodation with the application process or the DoD SkillBridge program, please contact [email protected].